Run build.sh or build.bat to compile the JAR from the latest sources. See the section below on Rebuilding Serialization Streams for an example of this. Update : SerializationDumper now supports rebuilding serialization streams so you can dump a Java serialization stream to a text file, modify the hex or string values, then convert the text file back into a binary serialization stream.

* See the limitations section below for more details. This tool was developed to support research into Java deserialization vulnerabilities after spending many hours manually decoding raw serialization streams to debug code!ĭownload v1.11 built and ready to run from here: objects in the stream are not instantiated), so it does not require access to the classes that were used in the stream*. The tool does not deserialize the stream (i.e. A tool to dump and rebuild Java serialization streams and Java RMI packet contents in a more human readable form.