Llmchainhunter
Leveraging LLM to generate Java deserialization chains
Install / Use
/learn @atredispartners/LlmchainhunterREADME
LLM Chain Hunter
This repo contains the design plan and runbook for using Claude Code to search for Java Deserialization Gadget chains.
The 00-* files are the implementation plan for the various components. The fixes directory contains modifications that were made to the original design. They should already be reflected in the design documents.
The CLAUDE-CODE-INSTRUCTIONS.MVP is the file that Claude Code should ready to gain an understanding of what it is building.
The RUNBOOK.md is the file Claude should read after the tools are built which tells it how to look for deserialization gadgets and how to drive the various tools it has created in the previous steps.
There are many improvements that can be made to the tooling and design, this was only an initial proof of concept to prove that LLM's could successfully be used to identify novel deserialization gadgets.
Security Score
Audited on Mar 30, 2026
