ysoserial.net

ysoserial.net is a utility designed to generate exploit payloads for unsafe .NET object deserialization vulnerabilities. By leveraging property-oriented programming "gadget chains" found in common .NET libraries, it allows attackers to craft serialized objects that, when deserialized by vulnerable applications, may execute arbitrary commands. Notable features include support for multiple .NET formatters and the ability to customize gadget chains based on user-specified commands.