lemono0/FastJsonParty

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1246 stars · 161 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

FastJsonParty is a collection of Dockerized vulnerable environments covering multiple FastJson versions (1.2.47, 1.2.68, 1.2.80) for practicing black-box exploitation of JNDI injection, deserialization, file read/write, and WAF bypass techniques. Each scenario is launched via docker compose and includes hidden flag files to capture, with accompanying PoC write-ups.

Use cases

• practice exploiting fast jndi injection vulnerabilities
• learn fast deserialization attacks in a safe lab
• train on waf bypass techniques for fast
• practice file write rce via fast 1.2.68
• simulate no-outbound-network exploitation scenarios
• set up a ctf-style flag hunting environment for java deserialization
• study fast 1.2.80 bypass chains

When to choose

• you want hands-on practice with fast vulnerabilities across versions
• you need ready-made docker environments for security training or ctf practice
• you are studying jndi injection and deserialization exploitation from a black-box perspective

When to avoid

• you need a production-safe JSON library rather than a vulnerable target
• you cannot run docker containers locally
• you want automated vulnerability scanning rather than manual exploitation practice

Facets

application · maturity active

security penetration-testing vulnerability-scanning developer-tools security penetration-testing developer-tools self-hosted self-hosted fast jndi-injection deserialization vulnerable-lab ctf docker-compose exploitation-practice waf-bypass docker linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="lemono0/FastJsonParty")