JavaCodeAudit

Getting started with java code auditing 代码审计入门的小项目

logbackRceDemo

The project is a simple vulnerability Demo environment written by SpringBoot. Here, I deliberately wrote a vulnerability environment where there are arbitrary file uploads, and then use the `scan` attribute in the loghack configuration file to cooperate with the logback vulnerability to implement RCE.

ThymeleafSSTIBypass

Thymeleaf SSTI Bypass

DirScan

A tool for scanning catalog