DeliberatelyVulnerableWebApp

의도적으로 취약한 웹 애플리케이션 Struts 2 이 프로젝트는 Struts 2 프레임워크를 사용하는 Java 웹 애플리케이션입니다. Maven으로 빌드되었으며 Jetty 서버를 사용하여 실행할 수 있습니다. 사전 요구 사항 Java Development Kit JDK 8 이상 Apache Maven 3.6.0 이상 시작하기 프로젝트 빌드 mvn clean install Jetty로 프로젝트 실행 mvn jetty:run 애플리케이션 접속 웹 브라우저를 열고 http://localhost:8080/dvwa로 이동하세요. 프로젝...

java-sec-code

This is an offensive tool for Java web applications. It is a collection of Java web common vulnerabilities and security code, based on Spring Boot and Spring Security. The repository contains various types of vulnerabilities, including actuators to RCE, command inject, CORS, CRLF injection, CSRF,...

dst-admin Code Injection Vulnerability

dst-admin is a web program written in Java by qinming99, an individual developer. A security vulnerability exists in dst-admin v1.5.0, which is caused by a Remote Command Execution RCE vulnerability in the parameter userId of the component /home/playerOperate...

Payatu ChatEngine SQL注入漏洞

ChatEngine is a Java web application by Winnie Liang Personal Developer. A security vulnerability exists in Payatu ChatEngine version v.1.0, which originates from a SQL injection issue in /src/chatbotapp/chatWindow.java...

dst-admin 命令注入漏洞

dst-admin is a web program written in Java by qinming99, an individual developer. A command injection vulnerability exists in dst-admin version 1.5.0, which stems from an unknown function in the file /home/cavesConsole, which can be injected with the parameter command...

dst-admin 命令注入漏洞

dst-admin is a web program written in Java by qinming99, an individual developer. A command injection vulnerability exists in dst-admin version 1.5.0, which stems from an unknown function in the file /home/sendBroadcast that can be injected via the parameter message...