Focus on Java Security since November 1, 2021
👣 `
基础漏洞
Java应用
漏洞分析、利用研究
- Alibaba Fastjson
- Apache Druid
- Apache Dubbo
- Apache JSPWiki
- Apache Log4j
- Apache Shiro
- Apache SkyWalking
- Apache Struts2
- Atlassian Jira
- FasterXML jackson-databind
- Groovy
- JBoss
- Jetty
- Resin
- SnakeYaml
- Spring MVC
- Spring Messaging
- Tomcat
- Wildfly
- Weblogic
- WebSphere
- XMLDecoder
- XStream
代码审计
审计练习
源码阅读
工具原理分析