ssrf

A list of resources for those interested in getting started in bug bounties

#安全#Top disclosed reports from HackerOne

Java web common vulnerabilities and security code which is base on springboot and spring security

Getting started with java code auditing 代码审计入门的小项目

This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack

Tool to help exploit XXE vulnerabilities

Redis 4.x/5.x RCE

RevSuit is a flexible and powerful reverse connection platform designed for receiving connection from target host in penetration.

JAVA 漏洞靶场 (Vulnerability Environment For Java)

Find All Parameters - Tool to crawl pages, find potential parameters and generate a custom target parameter wordlist