Created: 2012-03-26 20:37
Updated: 2019-01-23 04:11



JavaPayload is a collection of pure Java payloads to be used for post-exploitation from pure Java exploits or from common misconfigurations (like not password protected Tomcat manager or debugger port).

Outdated documentation can be found at

and inside this repo.

The current home of this project is and its source is at

Required libraries

Since Git does not perform well with huge libraries inside the repository, the required libraries have been left out. They are available as a separate download at

Get in touch

You can contact me at Or, just fork and send pull requests. I will try my very best to get them merged into SVN (still a git newbie), or may even switch over to GitHub if contributions get overwhelming :-)

Cookies help us deliver our services. By using our services, you agree to our use of cookies Learn more