Deserialization Payload Library

Insecure deserialization attack payloads for Java, PHP, Python, .NET, and Ruby. Includes ysoserial gadget chains, PHP object injection, and detection techniques. This free web security tool runs entirely in your browser — no data leaves your device, no account required, and it keeps working offline once the page has loaded.