Developed primarily by Chris Frohoff, is a proof-of-concept utility that consolidates "gadget chains" discovered in common Java libraries. It allows security researchers to wrap a user-specified command (e.g., calc.exe or ping ) into a serialized object that, when processed by a vulnerable application, automatically executes the command. 2. Download and Installation
Ysoserial generates these malicious serialized objects. ysoserial-0.0.4-all.jar download