dinosn/fastjson-jsontype-rce-lab
Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fastjson2 2.0.57: attacker @type reaches loadClass with autoType DISABLED via polymorphic types (@JSONType(seeAlso) / Jackson @JsonSubTypes). Marker-only payloads; safeMode + JDK17 controls.
Growth
- Last 24 hours
- +0
- stars
- Last 7 days
- +0
- stars
- Last 30 days
- +1
- stars
- Total stars
- 206
- 205 a month ago
- Forks
- 90
- 0 contributors
Star history
Last 12 weeks · weekly cumulative stars · computed from public GitHub star events
Rank in its topics
| Topic | Today | This week | This month |
|---|---|---|---|
| Python | – | – | – |
| Java | – | – | – |
| Security | – | – | – |
README
fastjson-jsontype-rce-lab
Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fastjson2 2.0.57: attacker @type reaches loadClass with autoType DISABLED via polymorphic types (@JSONType(seeAlso) / Jackson @JsonSubTypes). Marker-only payloads; safeMode + JDK17 controls.
Upstar hasn’t fetched this README yet. Read it on GitHub.