A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
-
Updated
Feb 2, 2021 - Java
Add a description, image, and links to the gadget topic page so that developers can more easily learn about it.
To associate your repository with the gadget topic, visit your repo's landing page and select "manage topics."
Good first issue for learning
goblin's API (it's a popular object file parsing library), learning about the Mach-O file format, and/or writing a bit of Rust if you're new to it.Although Apple will be switching to ARM in the future (an architecture
xgadgetdoesn’t support), there are a great deal of x86/x64 Mach-O binaries around today and supporting more file form