学习 Java 漏洞,记录一下代码
- 默认账号:admin/admin
- SQLi
- XSS
- RCE
- SSTI
- SpEL
- SSRF
- Directory Traversal
- Redirect
- CSRF
- File Upload
- XXE
- Actuator
- Fastjson
配置数据库连接,数据库文件db.sql
spring.datasource.url=jdbc:mysql://127.0.0.1:3306/test spring.datasource.username=root spring.datasource.password=1234567
git clone https://github.com/j3ers3/Hello-Java-Sec mvn clean package -DskipTests java -jar hello-0.0.1-SNAPSHOT.jar
- Java 1.8
- SpringBoot 4.0
- Bootstrap 4.6.0
- Codemirror 5.62.0
- Fastjson 1.2.24