NickstaDB/SerializationDumper

Health v2 · maintenance only

Adoption not part of the score

1078 stars · 124 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Java-based command-line tool that dumps Java serialization streams and RMI packet contents into a human-readable form without deserializing (instantiating) objects. It can also rebuild modified text dumps back into binary serialization streams.

Use cases

• analyze a raw Java serialization stream without executing it
• debug Java deserialization vulnerabilities during security research
• decode RMI packet contents in readable form
• modify hex or string values in a serialized stream and rebuild it
• inspect serialized Java objects without needing the original classes on the classpath

When to choose

• you need to inspect or edit Java serialization streams safely without instantiating objects
• you are researching or exploiting Java deserialization vulnerabilities
• you want to decode raw or hex-encoded serialized data from the command line

When to avoid

• you need to actually deserialize objects into live Java instances
• you need a GUI-based analysis tool
• you are working with non-Java serialization formats

Facets

cli-tool · maturity maintenance

security parser serialization reverse-engineering cli security developer-tools parsers jvm cli cross-platform java-deserialization rmi security-research vulnerability-analysis hex-dump command-line

Member repositories

For agents

markdown · JSON · MCP: product_card(name="NickstaDB/SerializationDumper")