GadgetExplorer

GadgetExplorer is a command-line tool designed for discovering potential deserialization gadget chains within .NET applications. It analyzes one or more assemblies, constructing reachability graphs to identify when a deserialization entrypoint can lead to various vulnerabilities, including file writes and command execution. The tool comes pre-configured with a comprehensive set of sinks across different vulnerability categories, making it valuable for researchers and exploit developers in the .NET community.