R4gd0ll/I-Wanna-Get-All

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1787 stars · 129 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A comprehensive Java post-exploitation vulnerability exploitation tool integrating 470 exploit modules for detection and attack of known vulnerabilities. It bundles deserialization gadget generation (Ysoserial-style), memory shell injection, DNSLog-based detection, and batch scanning with report export.

Use cases

• detect java deserialization vulnerabilities with dnslog callback
• generate ysoserial gadget payloads bypassing jdk17
• inject memory shells into geoserver or ruoyi
• batch scan up to 10 ips for known cves
• generate java memshell class files
• exploit jeecg and yonyou backend vulnerabilities

When to choose

• you are a pentester testing java applications for known exploitable vulnerabilities
• you need an all-in-one exploit toolkit with deserialization and memshell modules
• you want dnslog-based out-of-band vulnerability verification

When to avoid

• you need a compliant, licensed enterprise tool - it has no license file
• you want a general-purpose vulnerability scanner rather than java-focused exploitation
• unauthorized use - attacking systems without permission is illegal

Facets

cli-tool · maturity active

penetration-testing vulnerability-scanning security security penetration-testing developer-tools cross-platform jvm cli post-exploitation exploit-framework deserialization memshell dnslog java-vulnerabilities red-team ysoserial

Member repositories

For agents

markdown · JSON · MCP: product_card(name="R4gd0ll/I-Wanna-Get-All")