SerialKiller
Copyright (c) 2015-2016 Luca Carettoni
SerialKiller is an easy-to-use look-ahead Java deserialization library
to secure application from untrusted input.
When Java serialization is
used to exchange information between a client and a server, attackers
can replace the legitimate serialized stream with malicious data.