Inspect serialized file content

7

2

I have a file which apparently contains serialized structures. The first 26 bytes contain the string "java.util.HashMap", so I am sure that this file holds serialized data.

Is there is nice tool maybe with a simple UI, where I can show the structured data?

I googled for it for a while, but I didn't find any proper resources. It should run preferred on Windows. Linux would be fine too but is overhead for me.

rekire

Posted 2016-07-31T10:26:27.370

Reputation: 380

Answers

8

jdeserialize

There is tool from Google called "jdeserialize":

jdeserialize is a library that interprets Java serialized objects -- the data generated by an ObjectOutputStream. It also comes with a command-line tool that can generate compilable class declarations, extract block data, and print textual representations of instance values.

Project site of jdeserialize
Git repository of jdeserialize


Serialysis

There is also a Java library called "Serialysis", that can be used to generate human-readable output of a serialized object, like so:

SEntity sint = SerialScan.examine(new Integer(5));
System.out.println(sint);

...produces this output:

SObject(java.lang.Integer) {
  value = Prim(int){5}
}

Explanation of how Serialysis works
Git repository of Serialysis


Since both projects are written in Java, you can use them in both Windows and Linux.

Lasse Meyer

Posted 2016-07-31T10:26:27.370

Reputation: 238

Amazing tool, looks like what I'm looking for. – rekire – 2016-07-31T13:52:41.540

Since I was not sure how to compile it you can find the compiled jar at https://code.google.com/archive/p/jdeserialize/downloads

– rekire – 2016-07-31T13:56:39.510