This tool can be used to exploit vulnerable versions of RichFaces. It has payloads for 4 vulnerabilities that have been identified, which can lead to remote code execution via java deserialization and EL injection.
You can download it from the following link: https://packetstormsecurity.com/files/download/156663/Richsploit-master.zip
Source: https://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html