JoyChou93/java-sec-code resource

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

2673 stars · 770 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Spring Boot-based Java web application containing intentionally vulnerable code examples for common vulnerability types like SQLi, SSRF, XXE, RCE, and deserialization, with fix code provided in comments. It is designed as a hands-on learning and practice resource for Java security.

Use cases

• learn java web vulnerabilities with real code examples
• practice exploiting sqli ssrf xxe rce in a safe lab
• study secure coding fixes for java vulnerabilities
• train security engineers on java deserialization attacks
• set up a local vulnerable spring boot app for security testing
• compare vulnerable and fixed implementations of java security issues

When to choose

• you want to learn or teach java web security hands-on
• you need a realistic vulnerable java app for pentest practice
• you want to study both vulnerable and fixed code side by side

When to avoid

• you need a production-ready secure framework or library
• you want automated vulnerability scanning rather than example code
• you need a project with an explicit open-source license

Facets

learning-resource · maturity active

security penetration-testing vulnerability-scanning developer-tools security web-development developer-tools tutorials jvm self-hosted java-security vulnerable-app security-training spring-boot spring-security web-vulnerabilities sqli ssrf xxe rce deserialization penetration-testing-lab

Member repositories

For agents

markdown · JSON · MCP: product_card(name="JoyChou93/java-sec-code")