Gadget Probe
Summary: GadgetProbe is a Burp Suite extension by Jake Miller of Bishop Fox, version 1.0 and last updated 27 February 2020, that augments Intruder to probe endpoints consuming Java serialized objects. It identifies classes, libraries, and library versions on remote Java classpaths, with wordlists and details available on the project's GitHub page.
Bottom line: The extension maps the exact classes and library versions on a remote Java classpath, which is the reconnaissance step that determines which deserialization gadget chains an attacker can assemble against that endpoint.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026