vulhub/java-chains

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

2166 stars · 174 forks observed · 2026-10-02

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Java Chains is a self-hosted web platform for generating Java exploitation payloads, aimed at security researchers. It supports common Java payload generation plus JNDI, FakeMySQL, and JRMP testing through a web interface and bundled services.

Use cases

• generate java deserialization payloads for pentests
• test jndi injection vulnerabilities
• spin up a fake mysql server for exploitation testing
• run a jrmp listener during security assessments
• generate memory shell payloads for java apps

When to choose

• you are a security researcher testing java applications for deserialization or JNDI vulnerabilities
• you need an integrated platform with JNDI/LDAP/RMI/FakeMySQL/JRMP services in one tool
• you want a web UI instead of assembling individual exploit tools

When to avoid

• you need a general-purpose vulnerability scanner rather than a payload generation tool
• you require a project with an explicit open-source license for commercial use
• you are not working on java-specific security testing

Facets

application · maturity active

security penetration-testing web-framework security penetration-testing developer-tools self-hosted jvm java-security payload-generation jndi exploitation security-research deserialization docker web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="vulhub/java-chains")