#blacklist
#ysoserial's BeanShell1 payload
bsh.XThis
bsh.Interpreter

#ysoserial's C3P0 payload
com.mchange.v2.c3p0.impl.PoolBackedDataSourceBase

#ysoserial's CommonsBeanutils1 payload
org.apache.commons.beanutils.BeanComparator

#ysoserial's CommonsCollections1,3,5,6 payload
org.apache.commons.collections.Transformer
org.apache.commons.collections.functors.InvokerTransformer
org.apache.commons.collections.functors.ChainedTransformer
org.apache.commons.collections.functors.ConstantTransformer
org.apache.commons.collections.functors.InstantiateTransformer

#ysoserial's CommonsCollections2,4 payload
org.apache.commons.collections4.functors.InvokerTransformer
org.apache.commons.collections4.functors.ChainedTransformer
org.apache.commons.collections4.functors.ConstantTransformer
org.apache.commons.collections4.functors.InstantiateTransformer
org.apache.commons.collections4.comparators.TransformingComparator

#ysoserial's FileUpload1,Wicket1 payload
org.apache.commons.fileupload.disk.DiskFileItem
org.apache.wicket.util.upload.DiskFileItem

#ysoserial's Groovy payload
org.codehaus.groovy.runtime.ConvertedClosure
org.codehaus.groovy.runtime.MethodClosure

#ysoserial's Hibernate1,2 payload
org.hibernate.engine.spi.TypedValue
org.hibernate.tuple.component.AbstractComponentTuplizer
org.hibernate.tuple.component.PojoComponentTuplizer
org.hibernate.type.AbstractType
org.hibernate.type.ComponentType
org.hibernate.type.Type
com.sun.rowset.JdbcRowSetImpl

#ysoserial's JBossInterceptors1, JavassistWeld1 payload -->
org.jboss.interceptor.builder.InterceptionModelBuilder
org.jboss.interceptor.builder.MethodReference
org.jboss.interceptor.proxy.DefaultInvocationContextFactory
org.jboss.interceptor.proxy.InterceptorMethodHandler
org.jboss.interceptor.reader.ClassMetadataInterceptorReference
org.jboss.interceptor.reader.DefaultMethodMetadata
org.jboss.interceptor.reader.ReflectiveClassMetadata
org.jboss.interceptor.reader.SimpleInterceptorMetadata
org.jboss.interceptor.spi.instance.InterceptorInstantiator
org.jboss.interceptor.spi.metadata.InterceptorReference
org.jboss.interceptor.spi.metadata.MethodMetadata
org.jboss.interceptor.spi.model.InterceptionModel
org.jboss.interceptor.spi.model.InterceptionType

org.jboss.weld.interceptor.builder.InterceptionModelBuilder
org.jboss.weld.interceptor.builder.MethodReference
org.jboss.weld.interceptor.proxy.DefaultInvocationContextFactory
org.jboss.weld.interceptor.proxy.InterceptorMethodHandler
org.jboss.weld.interceptor.reader.ClassMetadataInterceptorReference
org.jboss.weld.interceptor.reader.DefaultMethodMetadata
org.jboss.weld.interceptor.reader.ReflectiveClassMetadata
org.jboss.weld.interceptor.reader.SimpleInterceptorMetadata
org.jboss.weld.interceptor.spi.instance.InterceptorInstantiator
org.jboss.weld.interceptor.spi.metadata.InterceptorReference
org.jboss.weld.interceptor.spi.metadata.MethodMetadata
org.jboss.weld.interceptor.spi.model.InterceptionModel
org.jboss.weld.interceptor.spi.model.InterceptionType

#ysoserial's JRMPClient payload
java.rmi.registry.Registry
java.rmi.server.ObjID
java.rmi.server.RemoteObjectInvocationHandler

#ysoserial's JSON1 payload
net.sf.json.JSONObject

#ysoserial's Jdk7u21 payload -->
javax.xml.transform.Templates

#ysoserial's Jython1 payload -->
org.python.core.PyObject
org.python.core.PyBytecode
org.python.core.PyFunction

#ysoserial's MozillaRhino1 payload -->
org.mozilla.javascript.*

#ysoserial's Myfaces1,2 payload
org.apache.myfaces.context.servlet.FacesContextImpl
org.apache.myfaces.context.servlet.FacesContextImplBase
org.apache.myfaces.el.CompositeELResolver
org.apache.myfaces.el.unified.FacesELContext
org.apache.myfaces.view.facelets.el.ValueExpressionMethodExpression

#ysoserial's ROME payload
com.sun.syndication.feed.impl.ObjectBean

#ysoserial's Spring1,2 payload
org.springframework.beans.factory.ObjectFactory
org.springframework.core.SerializableTypeWrapper$MethodInvokeTypeProvider
org.springframework.aop.framework.AdvisedSupport
org.springframework.aop.target.SingletonTargetSource
org.springframework.aop.framework.JdkDynamicAopProxy
org.springframework.core.SerializableTypeWrapper$TypeProvider

#other trigger gadgets or payloads -->
java.util.PriorityQueue
#java.lang.reflect.Proxy
javax.management.MBeanServerInvocationHandler
javax.management.openmbean.CompositeDataInvocationHandler
org.springframework.aop.framework.JdkDynamicAopProxy
java.beans.EventHandler
java.util.Comparator
org.reflections.Reflections

#bes internal class
com.bes.commons.beanutils.BeanComparator
com.bes.commons.collections.functors.ChainedTransformer
com.bes.commons.collections.functors.ConstantTransformer
com.bes.commons.collections.functors.InstantiateTransformer
com.bes.commons.collections.functors.InvokerTransformer
com.bes.commons.collections.Transformer