JavaSecLab

Default account password: admin/admin admin123/admin123 test/test Facing the crowd Security services: Help security service personnel understand the principle of vulnerabilities (generation, repair, audit), and analyze corresponding vulnerability traffic Party A's security aspects: It can be used as a development security training demonstration and a friendly interactive way to help R & D students understand vulnerabilities more easily. Security research: Different trigger scenarios for various vulnerabilities can be used for testing with security tools such as xAST Support vulnerability modules Cross-site scripting attacks, cross-site request counterfeiting, CORS, JSONP, URL redirection, XFF counterfeiting, denial of service, XPATH injection SQL injection, arbitrary file series, cross-server request forgery, XML entity injection, RCE Logic vulnerabilities (IDOR, Captcha security, payment security, concurrency security), sensitive information leakage series, login confrontation series SPEL injection, SSTI injection, deserialization, component vulnerability