JavaSpringVulny

Java Spring Vulny is a deliberately ill-designed Spring Boot Web application designed to provide a test target for web application security test scanners such as OWASP ZAProxy and StackHawk. This application combines the powerful features of the Spring framework with some homemade simple implementations, and is mainly used for security research and education purposes. ###Functions and characteristics: - ** Vulnerability testing **: Applications contain some common security vulnerabilities, such as SQL injection and cross-site scripting (XSS), for security tools to detect and test. - ** Multiple running environments **: Supports building and running in IDE, command line, Docker, and Windows environments. - ** Open API**: Provides OpenAPI specifications and Swagger documents to facilitate users to understand and test API interfaces. - ** Security scanning integration **: Supports automated security scanning using tools such as StackHawk and ZAP to help identify security vulnerabilities in applications. ###Usage instructions: - After launching the application, you can access it through `https://localhost:9000`. - Provide default login credentials (user name: user, password: password) to test login functionality. - Provide multiple scanning configuration examples and support different authentication and authorization methods to test application security. Java Spring Vulny is an ideal learning and testing platform for developers and security researchers to practice and explore security testing and vulnerability identification.