|
1 | | -# SecExample |
2 | 1 |
|
3 | | -| 漏洞名称 | 难度 | |
| 2 | +<div align="center"> |
| 3 | + |
| 4 | +# SecExample |
| 5 | +Use secexample to study Web security vulnerabilities |
| 6 | +https://github.com/tangxiaofeng7/SecExample |
| 7 | +<br> |
| 8 | +</div> |
| 9 | + |
| 10 | +[](https://github.com/tangxiaofeng7/SecExample/stargazers) |
| 11 | +[](https://github.com/tangxiaofeng7/SecExample/network) |
| 12 | +[](https://github.com/tangxiaofeng7/SecExample/issues) |
| 13 | +[](https://github.com/tangxiaofeng7/SecExample/graphs/contributors) |
| 14 | +[](https://github.com/tangxiaofeng7/SecExample/commits/master) |
| 15 | + |
| 16 | +# Introduce |
| 17 | +| Name | Star | |
4 | 18 | | ---------------------- | ---- | |
5 | | -| [SQL 注入漏洞] | 🌟🌟 | |
6 | | -| [XSS 漏洞] | 🌟 | |
7 | | -| [SSRF 漏洞] | 🌟🌟 | |
8 | | -| [CORS 漏洞] | 🌟🌟 | |
9 | | -| [RCE 漏洞] | 🌟🌟 | |
10 | | -| [反序列化漏洞-Fastjson反序列化] | 🌟🌟🌟🌟 | |
11 | | -| [验证码相关漏洞] | 🌟🌟 | |
| 19 | +| [SQLI] | 🌟🌟 | |
| 20 | +| [XSS] | 🌟 | |
| 21 | +| [SSRF] | 🌟🌟 | |
| 22 | +| [CORS] | 🌟🌟 | |
| 23 | +| [RCE] | 🌟🌟 | |
| 24 | +| [Fastjson] | 🌟🌟🌟🌟 | |
| 25 | +| [Verification] | 🌟🌟 | |
12 | 26 |
|
13 | 27 |
|
14 | | -### Docker启动 |
| 28 | +### Installation |
15 | 29 |
|
16 | 30 | ``` |
17 | 31 | git clone https://github.com/tangxiaofeng7/SecExample.git |
18 | 32 | cd SecExample |
19 | 33 | docker-compose up -d |
20 | 34 | ``` |
21 | 35 |
|
22 | | -然后访问:http://localhost:8080 |
23 | | - |
| 36 | +view: http://localhost:8080 |
24 | 37 |
|
| 38 | +[](https://asciinema.org/a/gcuay3zNoRUZ85BTPgjpGukuC) |
25 | 39 |
|
26 | | -### 本地调试 |
27 | 40 |
|
28 | | -##### 下载源码: |
29 | | -``` |
30 | | -git clone https://github.com/tangxiaofeng7/SecExample.git |
31 | | -``` |
32 | | -##### 使用idea导入 |
33 | | - |
34 | | -##### 编辑 src/main/resources/application.yml 的数据库配置 |
35 | | -``` |
36 | | -#url: jdbc:mysql://localhost:3306/mybatis?serverTimezone=UTC&useSSL=false |
37 | | -url: jdbc:mysql://mysql-db:3306/mybatis?serverTimezone=UTC&useSSL=false&allowPublicKeyRetrieval=true |
38 | | -``` |
39 | | -修改为 |
40 | | -``` |
41 | | -url: jdbc:mysql://localhost:3306/mybatis?serverTimezone=UTC&useSSL=false |
42 | | -#url: jdbc:mysql://mysql-db:3306/mybatis?serverTimezone=UTC&useSSL=false&allowPublicKeyRetrieval=true |
43 | | -``` |
44 | | -并且修改mysql用户名密码 |
45 | | -``` |
46 | | -username: root |
47 | | -password: 你的mysql密码 |
48 | | -``` |
49 | | -##### 本地启动mysql数据库 |
50 | | -启动数据库: |
51 | | -``` |
52 | | -mysql.server start |
53 | | -``` |
54 | | -进入 mysql终端: |
55 | | -``` |
56 | | -mysql -u root -p |
57 | | -``` |
58 | | -导入sql文件: |
59 | | -``` |
60 | | -source /xx/SecExample/mysql/init.sql(绝对路径) |
61 | | -``` |
62 | | - |
63 | | -##### 下载pom依赖 |
64 | | -``` |
65 | | -右键pom.xml =》 maven => 重新加载项目 |
66 | | -``` |
67 | | -##### 运行项目 |
68 | | -``` |
69 | | -运行 SecexampleApplication |
70 | | -``` |
| 41 | +### Screenshot |
71 | 42 |
|
| 43 | + |
72 | 44 |
|
73 | | -### 靶场展示 |
| 45 | +# Contributors |
74 | 46 |
|
75 | | -#### 首页 |
76 | | - |
| 47 | +<a href="https://github.com/tangxiaofeng7" target="_blank"> |
| 48 | + <img width=50 src="https://avatars.githubusercontent.com/u/45926593?s=60&v=4"></a> |
0 commit comments