René's URL Explorer Experiment


Title: GitHub - Heartway/java-sec-code at dev01 · GitHub

Open Graph Title: GitHub - Heartway/java-sec-code at dev01

X Title: GitHub - Heartway/java-sec-code at dev01

Description: Java web common vulnerabilities and security code which is base on springboot and spring security - GitHub - Heartway/java-sec-code at dev01

Open Graph Description: Java web common vulnerabilities and security code which is base on springboot and spring security - Heartway/java-sec-code

X Description: Java web common vulnerabilities and security code which is base on springboot and spring security - Heartway/java-sec-code

Opengraph URL: https://github.com/Heartway/java-sec-code/tree/dev01

X: @github

direct link

Domain: github.com

route-pattern/:user_id/:repository/tree/*name(/*path)
route-controllerfiles
route-actiondisambiguate
fetch-noncev2:3690edc0-fe8b-846a-33a3-3bbd9684523e
current-catalog-service-hashf3abb0cc802f3d7b95fc8762b94bdcb13bf39634c40c357301c4aa1d67a256fb
request-idA20C:942D6:267DBC:3544FF:6A546CB4
html-safe-nonced9b5472c94d6416a9d2db03f381b1f3ee10431a9b490ebc10c589b3fe17d82fa
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJBMjBDOjk0MkQ2OjI2N0RCQzozNTQ0RkY6NkE1NDZDQjQiLCJ2aXNpdG9yX2lkIjoiNjQ0MjcwMjgwMjY2NjE1NTE4OCIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmac522392dfb86ecfed26113f365faec72ad6d00dcad87a107e1f2e4b4e3c9ed5f8
hovercard-subject-tagrepository:298468443
github-keyboard-shortcutsrepository,source-code,file-tree,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///files/disambiguate
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/Heartway/java-sec-code/tree/dev01
twitter:imagehttps://opengraph.githubassets.com/959fca807ac3b0d6ce16a089454c9b35706f83e840fb32c9792fcc6293bf9f2f/Heartway/java-sec-code
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/959fca807ac3b0d6ce16a089454c9b35706f83e840fb32c9792fcc6293bf9f2f/Heartway/java-sec-code
og:image:altJava web common vulnerabilities and security code which is base on springboot and spring security - Heartway/java-sec-code
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
Noneb9a586c06a05a7a86fc7e3f4dbd03e42f6869085879aa184aa6369456dbd50fb
turbo-cache-controlno-cache
go-importgithub.com/Heartway/java-sec-code git https://github.com/Heartway/java-sec-code.git
octolytics-dimension-user_id29972686
octolytics-dimension-user_loginHeartway
octolytics-dimension-repository_id298468443
octolytics-dimension-repository_nwoHeartway/java-sec-code
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forktrue
octolytics-dimension-repository_parent_id115394871
octolytics-dimension-repository_parent_nwoJoyChou93/java-sec-code
octolytics-dimension-repository_network_root_id115394871
octolytics-dimension-repository_network_root_nwoJoyChou93/java-sec-code
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release6d28624802c2f7d9500239dd6870ed7031b7353b
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/Heartway/java-sec-code/tree/dev01#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FHeartway%2Fjava-sec-code%2Ftree%2Fdev01
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/open-source/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/open-source/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FHeartway%2Fjava-sec-code%2Ftree%2Fdev01
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Ffiles%2Fdisambiguate&source=header-repo&source_repo=Heartway%2Fjava-sec-code
Reloadhttps://github.com/Heartway/java-sec-code/tree/dev01
Reloadhttps://github.com/Heartway/java-sec-code/tree/dev01
Reloadhttps://github.com/Heartway/java-sec-code/tree/dev01
Heartway https://github.com/Heartway
java-sec-codehttps://github.com/Heartway/java-sec-code
JoyChou93/java-sec-codehttps://github.com/JoyChou93/java-sec-code
Notifications https://github.com/login?return_to=%2FHeartway%2Fjava-sec-code
Fork 1 https://github.com/login?return_to=%2FHeartway%2Fjava-sec-code
Star 0 https://github.com/login?return_to=%2FHeartway%2Fjava-sec-code
Code https://github.com/Heartway/java-sec-code/tree/dev01
Pull requests 0 https://github.com/Heartway/java-sec-code/pulls
Actions https://github.com/Heartway/java-sec-code/actions
Projects https://github.com/Heartway/java-sec-code/projects
Security and quality 0 https://github.com/Heartway/java-sec-code/security
Insights https://github.com/Heartway/java-sec-code/pulse
Code https://github.com/Heartway/java-sec-code/tree/dev01
Pull requests https://github.com/Heartway/java-sec-code/pulls
Actions https://github.com/Heartway/java-sec-code/actions
Projects https://github.com/Heartway/java-sec-code/projects
Security and quality https://github.com/Heartway/java-sec-code/security
Insights https://github.com/Heartway/java-sec-code/pulse
https://github.com/Heartway/java-sec-code
Brancheshttps://github.com/Heartway/java-sec-code/branches
Tagshttps://github.com/Heartway/java-sec-code/tags
https://github.com/Heartway/java-sec-code/branches
https://github.com/Heartway/java-sec-code/tags
109 Commitshttps://github.com/Heartway/java-sec-code/commits/dev01/
https://github.com/Heartway/java-sec-code/commits/dev01/
src/mainhttps://github.com/Heartway/java-sec-code/tree/dev01/src/main
src/mainhttps://github.com/Heartway/java-sec-code/tree/dev01/src/main
.gitattributeshttps://github.com/Heartway/java-sec-code/blob/dev01/.gitattributes
.gitattributeshttps://github.com/Heartway/java-sec-code/blob/dev01/.gitattributes
.gitignorehttps://github.com/Heartway/java-sec-code/blob/dev01/.gitignore
.gitignorehttps://github.com/Heartway/java-sec-code/blob/dev01/.gitignore
README.mdhttps://github.com/Heartway/java-sec-code/blob/dev01/README.md
README.mdhttps://github.com/Heartway/java-sec-code/blob/dev01/README.md
README_zh.mdhttps://github.com/Heartway/java-sec-code/blob/dev01/README_zh.md
README_zh.mdhttps://github.com/Heartway/java-sec-code/blob/dev01/README_zh.md
docker-compose.ymlhttps://github.com/Heartway/java-sec-code/blob/dev01/docker-compose.yml
docker-compose.ymlhttps://github.com/Heartway/java-sec-code/blob/dev01/docker-compose.yml
java-sec-code.imlhttps://github.com/Heartway/java-sec-code/blob/dev01/java-sec-code.iml
java-sec-code.imlhttps://github.com/Heartway/java-sec-code/blob/dev01/java-sec-code.iml
poc.xlsxhttps://github.com/Heartway/java-sec-code/blob/dev01/poc.xlsx
poc.xlsxhttps://github.com/Heartway/java-sec-code/blob/dev01/poc.xlsx
pom.xmlhttps://github.com/Heartway/java-sec-code/blob/dev01/pom.xml
pom.xmlhttps://github.com/Heartway/java-sec-code/blob/dev01/pom.xml
xxe.xlsxhttps://github.com/Heartway/java-sec-code/blob/dev01/xxe.xlsx
xxe.xlsxhttps://github.com/Heartway/java-sec-code/blob/dev01/xxe.xlsx
READMEhttps://github.com/Heartway/java-sec-code/tree/dev01
https://github.com/Heartway/java-sec-code/tree/dev01#java-sec-code
中文文档https://github.com/JoyChou93/java-sec-code/blob/master/README_zh.md
https://github.com/Heartway/java-sec-code/tree/dev01#introduce
Online demohttp://118.25.15.216:8080
https://github.com/Heartway/java-sec-code/tree/dev01#vulnerability-code
Actuators to RCEhttps://github.com/JoyChou93/java-sec-code/blob/master/src/main/resources/logback-online.xml
CommandInjecthttps://github.com/JoyChou93/java-sec-code/blob/master/src/main/java/org/joychou/controller/CommandInject.java
CORShttps://github.com/JoyChou93/java-sec-code/blob/master/src/main/java/org/joychou/controller/CORS.java
CRLF Injectionhttps://github.com/JoyChou93/java-sec-code/blob/master/src/main/java/org/joychou/controller/CRLFInjection.java
CSRFhttps://github.com/JoyChou93/java-sec-code/blob/master/src/main/java/org/joychou/security/WebSecurityConfig.java
Deserializehttps://github.com/JoyChou93/java-sec-code/blob/master/src/main/java/org/joychou/controller/Deserialize.java
Fastjsonhttps://github.com/JoyChou93/java-sec-code/blob/master/src/main/java/org/joychou/controller/Fastjson.java
File Uploadhttps://github.com/JoyChou93/java-sec-code/blob/master/src/main/java/org/joychou/controller/FileUpload.java
IP Forgehttps://github.com/JoyChou93/java-sec-code/blob/master/src/main/java/org/joychou/controller/IPForge.java
Java RMIhttps://github.com/JoyChou93/java-sec-code/blob/master/src/main/java/org/joychou/RMI/Server.java
JSONPhttps://github.com/JoyChou93/java-sec-code/blob/master/src/main/java/org/joychou/controller/jsonp/JSONP.java
PathTraversalhttps://github.com/JoyChou93/java-sec-code/blob/master/src/main/java/org/joychou/controller/PathTraversal.java
RCEhttps://github.com/JoyChou93/java-sec-code/blob/master/src/main/java/org/joychou/controller/Rce.java
SpELhttps://github.com/JoyChou93/java-sec-code/blob/master/src/main/java/org/joychou/controller/SpEL.java
SQL Injectionhttps://github.com/JoyChou93/java-sec-code/blob/master/src/main/java/org/joychou/controller/SQLI.java
SSRFhttps://github.com/JoyChou93/java-sec-code/blob/master/src/main/java/org/joychou/controller/SSRF.java
SSTIhttps://github.com/JoyChou93/java-sec-code/blob/master/src/main/java/org/joychou/controller/SSTI.java
URL Redirecthttps://github.com/JoyChou93/java-sec-code/blob/master/src/main/java/org/joychou/controller/URLRedirect.java
URL whitelist Bypasshttps://github.com/JoyChou93/java-sec-code/blob/master/src/main/java/org/joychou/controller/URLWhiteList.java
XSShttps://github.com/JoyChou93/java-sec-code/blob/master/src/main/java/org/joychou/controller/XSS.java
XStreamhttps://github.com/JoyChou93/java-sec-code/blob/master/src/main/java/org/joychou/controller/XStreamRce.java
XXEhttps://github.com/JoyChou93/java-sec-code/blob/master/src/main/java/org/joychou/controller/XXE.java
https://github.com/Heartway/java-sec-code/tree/dev01#vulnerability-description
Actuators to RCEhttps://github.com/JoyChou93/java-sec-code/wiki/Actuators-to-RCE
CORShttps://github.com/JoyChou93/java-sec-code/wiki/CORS
CSRFhttps://github.com/JoyChou93/java-sec-code/wiki/CSRF
Deserializehttps://github.com/JoyChou93/java-sec-code/wiki/Deserialize
Fastjsonhttps://github.com/JoyChou93/java-sec-code/wiki/Fastjson
Java RMIhttps://github.com/JoyChou93/java-sec-code/wiki/Java-RMI
JSONPhttps://github.com/JoyChou93/java-sec-code/wiki/JSONP
SQLIhttps://github.com/JoyChou93/java-sec-code/wiki/SQL-Inject
SSRFhttps://github.com/JoyChou93/java-sec-code/wiki/SSRF
SSTIhttps://github.com/JoyChou93/java-sec-code/wiki/SSTI
URL whitelist Bypasshttps://github.com/JoyChou93/java-sec-code/wiki/URL-whtielist-Bypass
XXEhttps://github.com/JoyChou93/java-sec-code/wiki/XXE
Othershttps://github.com/JoyChou93/java-sec-code/wiki/others
https://github.com/Heartway/java-sec-code/tree/dev01#how-to-run
https://github.com/Heartway/java-sec-code/tree/dev01#docker
https://github.com/Heartway/java-sec-code/tree/dev01#idea
https://github.com/Heartway/java-sec-code/tree/dev01#tomcat
https://github.com/Heartway/java-sec-code/tree/dev01#jar
https://github.com/Heartway/java-sec-code/tree/dev01#authenticate
https://github.com/Heartway/java-sec-code/tree/dev01#login
http://localhost:8080/loginhttp://localhost:8080/login
https://github.com/Heartway/java-sec-code/tree/dev01#logout
http://localhost:8080/logouthttp://localhost:8080/logout
https://github.com/Heartway/java-sec-code/tree/dev01#rememberme
https://github.com/Heartway/java-sec-code/tree/dev01#contributors
JoyChouhttps://github.com/JoyChou93
lightlesshttps://github.com/lightless233
Anemone95https://github.com/Anemone95
https://github.com/Heartway/java-sec-code/tree/dev01#donate
https://github.com/Heartway/java-sec-code/tree/dev01#alipay
https://camo.githubusercontent.com/192d0d0b190c11cb549f488a0b2d363f23fd461d751d73a3f986b9a8ccea4a8e/68747470733a2f2f616c6979756e2d746573746161612e6f73732d636e2d7368616e676861692e616c6979756e63732e636f6d2f616c697061795f71722e706e67
118.25.15.216:8080http://118.25.15.216:8080
Readme https://github.com/Heartway/java-sec-code/tree/dev01#readme-ov-file
Please reload this pagehttps://github.com/Heartway/java-sec-code/tree/dev01
Activityhttps://github.com/Heartway/java-sec-code/activity
1 forkhttps://github.com/Heartway/java-sec-code/forks
Report repository https://github.com/contact/report-content?content_url=https%3A%2F%2Fgithub.com%2FHeartway%2Fjava-sec-code&report=Heartway+%28user%29
Releaseshttps://github.com/Heartway/java-sec-code/releases
3 tags https://github.com/Heartway/java-sec-code/tags
Packages 0https://github.com/users/Heartway/packages?repo_name=java-sec-code
Please reload this pagehttps://github.com/Heartway/java-sec-code/tree/dev01
Contributorshttps://github.com/Heartway/java-sec-code/graphs/contributors
Please reload this pagehttps://github.com/Heartway/java-sec-code/tree/dev01
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.