Back to projects
DevTools

fastjson-jsontype-rce-lab by dinosn

View on GitHub
Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fastjson2 2.0.57: attacker @type reaches loadClass with autoType DISABLED via polymorphic types (@JSONType(seeAlso) / Jackson @JsonSubTypes). Marker-only payloads; safeMode + JDK17 controls. Maintained by dinosn on GitHub, where it has earned 203 stars from the community.
dinosn
dinosn
Maintainer
203 stars

Install

pip install fastjson-jsontype-rce-lab

Languages

Java19%
Last updated2mo ago
LicenseMIT

More Spring Boot projects

Ask MadeWithWhat

AI answers may contain mistakes — please double-check important details.