Sonar helps you commit clean code every time. With over 600 unique rules to find Java bugs, code smells & vulnerabilities, Sonar finds the issues while you focus on the work. Learn more →
Top 12 Java Serialization Projects
-
Project mention: [Release] Java Tron GreatVoyage-v4.4.6 (David) | reddit.com/r/TronLabs_RO | 2022-05-25
Update for a security vulnerability in fastjsonhttps://github.com/alibaba/fastjson/wiki/security_update_20220523two improvements are suggested:
-
ysoserial
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
Project mention: Java deserialization payloads in log4j (Unified starting point) | reddit.com/r/hackthebox | 2022-12-23So I've finished the unified box in stage 2 of the starting point and have tons of questions about the box. In the box they use veracode-research/rogue-jndi to exploit the log4j vulnerability. But when I test it with deserialize payload generated by frohoff/ysoserial it's not running. I've try to look at the java log in the challenge container but can't find anything that java complain or error out. Is it because the ysoserial payload too complex that it running but fail at some point and don't throw error or maybe the author just hard code so that only the payload from rogue-jndi work? can it's because of the java version/framework/library/weirdness? Do I need to test both kind of payload if I want to exploit log4j in the future or just stick with pimps/JNDI-Expoit-Kit or cckuailong/JNDI-Injection_Exploit-Plus (my senior recommendation when exploiting log4j).
-
Sonar
Write Clean Java Code. Always.. Sonar helps you commit clean code every time. With over 600 unique rules to find Java bugs, code smells & vulnerabilities, Sonar finds the issues while you focus on the work.
-
-
-
jsoniter
jsoniter (json-iterator) is fast and flexible JSON parser available in Java and Go (by json-iterator)
If JSON decoding ever becomes a bottleneck, use https://jsoniter.com/ . Even fhe drop-in replacement API is faster than the stdlib. If you need absolute insane performance, use the streaming API.
-
Project mention: What is the fastest way to encode the arbitrary struct into bytes? | reddit.com/r/golang | 2023-03-02
so appreciate such a detailed reply, thanks. btw, why did you choose tinylib/msgp from 4 available go-impls?
-
zfoo
💡Extremely fast enterprise server framework, can be used in RPC, web server framework, game server framework.(极致性能的Java服务器框架,RPC,游戏服务器框架,web应用服务器框架。)
Project mention: Extremely fast enterprise server framework, can be used in RPC, web server framework, game server framework. | reddit.com/r/java | 2023-02-17I'm guessing it's this one: https://github.com/zfoo-project/zfoo
-
InfluxDB
Access the most powerful time series database as a service. Ingest, store, & analyze all types of time series data in a fully-managed, purpose-built database. Keep data forever with low-cost storage and superior data compression.
-
Project mention: Interesting example of how “JEP 374” affects performance | news.ycombinator.com | 2022-04-19
-
-
-
-
NetworkParser
Framework for serialization to Json, XML, Byte and Excel, therefore an oviparous wool milk sow J
Java Serialization related posts
- gRPC on the client side
- Why is json logging the “standard”?
- Extremely fast enterprise server framework, can be used in RPC, web server framework, game server framework.
- QuickBuffers 1.1 released
- Using Arduino as input to Rust project (help needed)
- What is serialization in PHP
- JEP draft: 64 bit object headers
-
A note from our sponsor - Sonar
www.sonarsource.com | 21 Mar 2023
Index
What are some of the best open-source Serialization projects in Java? This list will help you:
Project | Stars | |
---|---|---|
1 | fastjson | 25,199 |
2 | ysoserial | 6,176 |
3 | protostuff | 1,912 |
4 | FST | 1,510 |
5 | jsoniter | 1,427 |
6 | MessagePack | 1,337 |
7 | zfoo | 1,134 |
8 | opack | 27 |
9 | Packable | 26 |
10 | kdl4j | 23 |
11 | PHP Serializer | 15 |
12 | NetworkParser | 4 |