ErrLookup › frohoff/ysoserial

frohoff/ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. · Java · 60 source files

Analyzed at 218bcffcaa on 2026-09-12. 18 documented errors.

Code / MessageTypeSeverityTags
couldn't find
exception error java, classpath, class-not-found
Command format is
validation error argument-parsing, ysoserial, deserialization
Not allowed to read object
exception warning java, security, deserialization, rmi
unknown transport op
exception warning java, rmi, jrmp, protocol
Failed to construct payload
exception error ysoserial, reflection, wrapped-exception
Unsupported command
validation error java, unsupported-operation, payload-generation
Invalid payload type
validation error ysoserial, cli, validation
mismatched columns
exception error java, string-formatting, input-validation
Bad command format.
validation error java, argument-format, payload-generation
Connect failed
exception error java, network, xnio, connection
unable to read objID
exception error java, rmi, jrmp, deserialization
Hibernate4 can only call getters
validation error ysoserial, hibernate, reflection
Command format is
validation error argument-parsing, ysoserial, myfaces
Invalid el type
validation error ysoserial, myfaces, config, el
Failed to get object id
exception error java, rmi, jenkins, parsing
Not a HTTP url
exception error java, http, url, cli
Failed to get object id, separator
exception error java, rmi, jenkins, parsing
Connect timeout
exception error java, network, timeout, xnio