RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities
Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.
Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.