Deserialization payload generator for a variety of .NET formatters

A proof-of-concept tool for generating payloads that exploit unsafe .NET object deserialization. Description ysoserial.net is a collection of utilities and property-oriented programming "gadget chains" discove

Related Repos



ReubenBond Hagar There are many existing serialization libraries and formats which are efficient, fast, and support schema evolution, so why create this? Existing serialization libraries which support version tolerance tend to restrict
 

TomaszRewak Stack only json deserialization using generators and the System.Text.Json library
 

1996v A small, high performance, powerful serializer using bssom binary protocol