Hello world!

This module is automatically included as part of the Tapestry IoC Registry, it's a good place to configure and extend Tapestry, or to place your own s

Central Spring Boot application class to bootstrap the application. Excludes Spring Security auto-configuration as we don't need it for the example bu

Main class.

@author Whoopsunix

RCE EventHandler ProcessBuilder/JdbcRowSetImpl JNDI <=1.4.6

File Read <=1.4.8

Hello world!

DOS <= 1.4.9 RCE LazyIterator <1.4.10

@author Whoopsunix <p> CVE-2020-11995

@author Whoopsunix CVE-2020-1948 2.5.x、[2.6.0, 2.6.7]、[2.7.0, 2.7.6]、2.7.7 抓请求包看看数据

@author Whoopsunix CVE-2020-1948 2.5.x、[2.6.0, 2.6.7]、[2.7.0, 2.7.6]、2.7.7 构建 Socket 后续都是此方式的利用

RCE ImageIO ProcessBuilder/JdbcRowSetImpl JNDI <= 1.4.13

@author Whoopsunix XStream < 1.4.15 SSRF漏洞

CVE-2020-26259 XStream 任意文件删除反序列化漏洞 XStream < 1.4.15 SSRF漏洞

Hello world!

DOS <=1.4.15

SSRF <=1.4.15

Arbitrary File Deletion <=1.4.15

Code Execution JdbcRowSetImpl JNDI <=1.4.15

Code Execution <=1.4.15

Code Execution SwingLazyValue JNDI <=1.4.15

Code Execution ClassLoader <=1.4.15

ReDOS <=1.4.15

SSRF <=1.4.15

Code Execution BCEL <=1.4.15

Code Execution XercesValue JdbcRowSetImpl JNDI <=1.4.15

@author Whoopsunix CVE-2021-25461

@author Whoopsunix CVE-2021-27850

@author Whoopsunix XStream < 1.4.17

@author Whoopsunix <p> CVE-2021-30179 <p> 2.5.x、[2.6.0, 2.6.8]、[2.7.0, 2.7.9]

@author Whoopsunix <p> CVE-2021-30180 pre-auth

@author Whoopsunix <p> CVE-2021-30180 pre-auth

@author Whoopsunix <p> CVE-2021-30180 pre-auth

@author Whoopsunix

@author Whoopsunix CVE-2021-30181

@author Whoopsunix <p> CVE-2021-36162 pre-auth

@author Whoopsunix <p> CVE-2021-36163

@author Whoopsunix CVE-2021-37579

@author Whoopsunix XStream < 1.4.17

@author Whoopsunix XStream < 1.4.17 DDOS

@author Whoopsunix XStream < 1.4.17

@author Whoopsunix XStream < 1.4.17

CVE-2021-43297 Ref: https://github.com/bitterzzZZ/CVE-2021-43297-POC?tab=readme-ov-file

@author Whoopsunix CVE-2022-39198

@author Whoopsunix CVE-2022-42889

@author Whoopsunix CVE-2022-45047

@author Whoopsunix CVE-2023-23638

@author Whoopsunix

@author Whoopsunix

Default {@link DemoService} @see DemoService @since 2.7.0

@author Whoopsunix

@author Whoopsunix

@author Whoopsunix

@author Whoopsunix

@author Whoopsunix

Demo Service interface @since 2.7.0