zkar: Java serialization protocol analysis tool

ZKar

ZKar is a Java serialization protocol analysis tool implemented in Go. This tool is still a work in progress, so no complete API document and contribution guide.

ZKar provides:

• A Java serialization payloads parser and viewer in pure Go, no CGO or JDK is required
• From the Java serialization protocol to a Go struct
• A Go library that can manipulate the Java serialization data
• WIP: ysoserial implement in Go
• WIP: Java class bytecodes parser, viewer, and manipulation
• WIP: An implementation of RMI/LDAP in Go

Tests

ZKar is a well-tested tool that passed all ysoserial generated gadgets parsing and rebuilding tests. It means that gadget generating by ysoserial can be parsed by ZKar, and parsed struts can be converted back into bytes string which is equal to the original one.

Install & Use

Copyright (c) 2022 Phith0n