8000 GitHub - singgett2/java-sec-code at dev
[go: up one dir, main page]

Skip to content

singgett2/java-sec-code

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

52 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Java Security Code

介绍

该项目也可以叫做Java Vulnerability Code(Java漏洞代码)。

每个漏洞类型代码默认存在安全漏洞(除非本身不存在漏 7C3B ),相关修复代码在注释里。具体可查看每个漏洞代码和注释。

漏洞代码

漏洞说明

如何运行

Tomcat

  1. 生成war包 mvn clean package
  2. 将target目录的war包,cp到Tomcat的webapps目录
  3. 重启Tomcat应用
http://localhost:8080/java-sec-code-1.0.0/rce/exec?cmd=whoami

返回

Viarus

IDEA

如果想在IDEA中直接运行,需要在IDEA中添加Tomcat配置,步骤如下:

Run -> Edit Configurations -> 添加TomcatServer(Local) -> Server中配置Tomcat路径 -> Deployment中添加Artifact选择java-sec-code:war exploded

tomcat

配置完成后,右上角直接点击run,即可运行。

http://localhost:8080/rce/exec?cmd=whoami

返回

Viarus

About

Java web common vulnerabilities and security code which is base on springboot and spring security

Resources

Stars

Watchers

Forks

Packages

No packages published

Languages

  • Java 95.5%
  • HTML 3.0%
  • CSS 1.3%
  • TSQL 0.2%
0