c0ny1/FastjsonExploit

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1406 stars · 175 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Java CLI framework for quickly exploiting Fast deserialization vulnerabilities. It generates exploit payloads with one command and bundles 11 exploit variants and bypasses across Fast versions.

Use cases

• generate fast exploit payloads
• test fast jndi injection vulnerabilities
• bypass fast autoType restrictions in 1.2.41-1.2.47
• spin up rmi and ldap exploit environments for fast testing
• run command execution payloads against vulnerable fast versions
• verify whether a target is vulnerable to fast deserialization

When to choose

• you are pentesting or assessing a Java app running a vulnerable Fast version
• you need a ready-made catalog of Fast exploit chains and version bypasses
• you want one-command payload generation plus exploit environment startup

When to avoid

• you need a general-purpose vulnerability scanner rather than a Fast-specific exploit tool
• you require a maintained tool with an active license and ongoing updates
• you are defending systems and want detection tooling instead of exploitation

Facets

cli-tool · maturity maintenance

penetration-testing security cli developer-tools security penetration-testing developer-tools jvm cli cross-platform fast exploit-framework jndi payload-generation deserialization red-team

Member repositories

For agents

markdown · JSON · MCP: product_card(name="c0ny1/FastjsonExploit")