JGD v1.0.0 — Initial Release

⚡ JGD v1.0.0 — JavaGadgetDigger

Solving the Last Mile of Deserialization Vulnerability Discovery

What's Inside

• 🔍 Autonomous mining: Input any JAR directory → output chains + weaponized PoCs
• 📊 Static analysis: Bytecode disassembly + operand-stack symbolic execution (receiver/argument bridges)
• ⚡ Dynamic probes: Batch-parallel JVM, 3 carriers (BAVE/HashMap/HashMap_EQ), field-contract synthesis
• 🤖 Dual-model adversarial auditing: Finder ≠ Verifier, acceptance-gated terminal verdict
• 🔫 Weaponized PoC: Auto-derived chains → tail candidate loop → RCE closure demo (benign)
• 📋 Public chain determination: Four-state (PRESENT/VERSION/ASSEMBLE/FIRE) with version gates
• 🖥️ TUI + CLI: Interactive chain visualization (EN/CN) + one-shot batch audit

🆕 Discovered Chains

Tier	Count	Status
T1 (Novel Entry)	1	✅ RCE Closed
T2 (New Carriers)	6	✅ RCE Closed
T3 (Variants)	1	⏳ Pending

Quick Start

# CLI mode
python3 audit_target.py --target /path/to/jars --name "your-product"

# TUI mode
python3 tui.py --lang zh

**Full Changelog**: https://github.com/lupingQAQ/JGD/commits/v1.0.0