nines-nine/GadgetExplorer

GadgetExplorer is a .NET command-line tool for finding potential deserialization gadget chains in managed applications. It scans one or more assemblies, builds a reachability graph with dispatch and callback heuristics, and reports when a deserialization entrypoint can reach a sink you care about.

语言：C# · GitHub 星标：17 · Fork：1

话题：csharp · deserialization · deserialization-vulnerability · dotnet · exploit-development · offensive-security · security · security-research

在 GitHub 上查看原仓库