Hunt insecure deserialization RCE

hunt-deserializationskillsetup L11,791
elementalsouls/Claude-BugHunter
What it does

Hunt Insecure Deserialization — Java gadget chains

Best for

Use for hunt insecure deserialization — java gadget chains (ysoserial), php object injection (phpggc), python pickle rce, .net binaryformatter, ruby marshal.load, jndi/log4shell. rce via deserialization is almost always critical. use when target runs java, php serialization, python pickle, .net, or ruby on rails.

Inputs
  • · target
  • · test vectors
  • · payloads
Outputs
  • · vulnerability report
  • · PoC code
  • · impact assessment
Requires
  • · curl
  • · HTTP client
Preconditions

Required dependencies and environment setup — see body for details

Failure modes

See documentation for known limitations and edge cases

Trust signals
  • · Skill: skill
  • · Repository: elementalsouls/Claude-BugHunter