> pr repo
>
> JavaSecurity
# JavaSecurityLearning
## Ref
https://github.com/Y4tacker/JavaSec
##
Springboot[JavaSpringBootIDEA](https://www.bilibili.com/video/BV1PE411i7CV)
vueVUE [Vue2.0+Vue3.0vuejs](https://www.bilibili.com/video/BV1Zy4y1K7SH?spm_id_from=333.788.top_right_bar_window_custom_collection.content.click)
[SpringBoot+Vue](https://www.bilibili.com/video/BV1PQ4y1P7hZ?vd_source=a4eba559e280bf2f1aec770f740d0645)
-
Java [JavaJava](https://www.bilibili.com/video/BV12J41137hu?spm_id_from=333.337.search-card.all.click)
## Java
b
- [Java-(21/09/05)](https://www.bilibili.com/video/BV16h411z7o9?spm_id_from=333.788.top_right_bar_window_custom_collection.content.click)
- [Java-IO](https://drun1baby.github.io/2022/05/30/Java-IO/)
- [](https://drun1baby.github.io/2022/05/20/Java-02-JavaURLDNS/)
- [JDK](https://drun1baby.github.io/2022/06/01/Java-04-JDK/)
- [](https://drun1baby.github.io/2022/05/17/Java-01-/)
- [URLDNS](https://drun1baby.github.io/2022/05/20/Java-02-JavaURLDNS/)
- [](https://drun1baby.github.io/2022/06/03/Java-05-/)
- [shell yso ](https://drun1baby.github.io/2022/07/20/shell/)
- [Java shell Runtime.getRuntime().exec() ](https://drun1baby.github.io/2022/10/12/Java--shell--Runtime-getRuntime-exec-/)
## Java
CC CC 1-6-3-2-4-5-7
CC11 CC
- b
- [CC1](https://drun1baby.github.io/2022/06/06/JavaCommons-Collections01-CC1/)
- [CC1](https://drun1baby.github.io/2022/06/10/JavaCommons-Collections02-CC1/)
- [CC6](https://drun1baby.github.io/2022/06/11/JavaCommons-Collections03-CC6/)
- [CC3](https://drun1baby.github.io/2022/06/20/JavaCommons-Collections04-CC3/)
- [CC2](https://drun1baby.github.io/2022/06/28/JavaCommons-Collections05-CC2/)
- [CC4](https://drun1baby.github.io/2022/06/28/JavaCommons-Collections06-CC4/)
- [CC5](https://drun1baby.github.io/2022/06/29/JavaCommons-Collections07-CC5/)
- [CC7](https://drun1baby.github.io/2022/06/29/JavaCommons-Collections08-CC7/)
- [CC11](https://drun1baby.github.io/2022/07/11/JavaCommons-Collections09-CC11/)
- [CommonsBeanUtils](https://drun1baby.github.io/2022/07/12/CommonsBeanUtils/)
CC shiro shiro
- [Shiro550](https://drun1baby.github.io/2022/07/10/JavaShiro01-Shiro550/)
- [02-Shiro721](https://drun1baby.top/2023/03/08/JavaShiro02-Shiro721/)
## Java
-
- [RMI](https://drun1baby.github.io/2022/07/19/JavaRMI01-RMI/)
- [RMI](https://drun1baby.github.io/2022/07/23/JavaRMI02-RMI/)
- [JNDI](https://drun1baby.github.io/2022/07/28/JavaJNDI/)
- [ JEP290](https://drun1baby.top/2023/04/18/-JEP290/)
LDAP JNDI
***
## Fastjson
- [FastJson](https://drun1baby.github.io/2022/08/04/JavaFastjson01-Fastjson/)
- [Fastjson-1.2.24](https://drun1baby.github.io/2022/08/06/JavaFastjson02-Fastjson-1-2-24/)
- [Fastjson03-Fastjson](https://drun1baby.github.io/2022/08/08/JavaFastjson03-Fastjson/)
- [JavaFastjson04-Fastjson1.2.62-1.2.68](https://drun1baby.github.io/2022/08/13/JavaFastjson04-Fastjson1-2-62-1-2-68/)
- [JavaFastjson05-](https://drun1baby.top/2022/10/19/JavaFastjson05-/)
2022 fastjson 1.2.68 [CTFReposityStore](https://github.com/Drun1baby/CTFReposityStore)
## Log4j2
- [Log4j2 ](https://drun1baby.github.io/2022/08/09/Log4j2/)
WeblogicTomcat Spring Spring
[Spring](https://drun1baby.github.io/2022/08/18/Spring/)
## Weblogic
- [CVE-2015-4852 WebLogic T3 ](https://drun1baby.top/2022/11/28/CVE-2015-4852-WebLogic-T3-/)
- [CVE-2017-10271 WebLogic XMLDecoder](https://drun1baby.top/2023/02/09/CVE-2017-10271-WebLogic-XMLDecoder/)
- [CVE-2021-2109 WebLogic JNDI ](https://drun1baby.top/2023/02/12/CVE-2021-2109-WebLogic-JNDI-/)
- [WebLogic &&SSRF](https://drun1baby.top/2023/03/06/WebLogic---SSRF/)
## EL OGNL
- [Java SpEL ](https://drun1baby.github.io/2022/09/23/Java--SpEL-/)
- [Java EL ](https://drun1baby.github.io/2022/09/23/Java--EL-/)
##
[Servlet ](https://drun1baby.github.io/2022/08/22/Servlet-/)
- [Java 01-](https://drun1baby.github.io/2022/08/19/Java-01-/)
- [Java-02-](https://drun1baby.github.io/2022/08/21/Java-02-/)
- [Java-03-Tomcat Filter ](https://drun1baby.github.io/2022/08/22/Java-03-Tomcat--Filter-/)
- [Java-04-Tomcat Listener ](https://drun1baby.github.io/2022/08/27/Java-04-Tomcat--Listener-/)
- [Java-05-Tomcat Servlet ](https://drun1baby.github.io/2022/09/04/Java-05-Tomcat--Servlet-/)
- [Java-06-Tomcat Valve ](https://drun1baby.github.io/2022/09/07/Java-06-Tomcat--Valve-/)
- [Java Agent ](https://drun1baby.top/2023/12/07/Java-Agent-/)
## Java
WebGoat [WebGoat](https://drun1baby.top/2022/03/17/WebGoat-02-SQL/)
**** [Java Owasp Top10 ](https://github.com/Drun1baby/JavaSecurityLearning/tree/main/JavaSecurity/CodeReview/JavaSec-Code)
##
[JavaC3P0](https://drun1baby.github.io/2022/10/06/JavaC3P0/)
[Java OWASP XXE ](https://drun1baby.github.io/2022/09/16/Java-OWASP--XXE-/)
[Java OWASP SQL ](https://drun1baby.github.io/2022/09/14/Java-OWASP--SQL-/)
[Java ERP CMS v2.3](https://drun1baby.github.io/2022/09/30/Java--ERP-CMS-V2.3/)
[Java SnakeYaml ](https://drun1baby.github.io/2022/10/16/Java-SnakeYaml-/)
SnakeYaml Fastjson Fastjson
[JavaFastjson05-](https://drun1baby.github.io/2022/10/19/JavaFastjson05-/)
## Struts2
[Java Struts2 ](https://drun1baby.github.io/2022/11/02/Java-Struts2-/)
[Java Struts2 S2-001](https://drun1baby.github.io/2022/10/27/Java-Struts2--S2-001/)
## Jackson
[Jackson ](https://drun1baby.top/2023/12/07/Jackson-/)
[Jackson CVE-2017-7525](https://drun1baby.top/2023/12/07/Jackson-CVE-2017-7525/)
[Jackson CVE-2017-17485](https://drun1baby.top/2023/12/07/Jackson-CVE-2017-17485/)
## CodeQL
[CodeQL ](https://drun1baby.top/2023/09/03/CodeQL-%E5%85%A5%E9%97%A8/)
[CodeQL ](https://drun1baby.top/2023/07/31/CodeQL-%E5%AD%A6%E4%B9%A0/)