Java Sec Code is an educational project demonstrating common Java web vulnerabilities and their fixes based on Spring Boot and Spring Security.
Java web common vulnerabilities and security code which is base on springboot and spring security
This tool is designed for developers and security enthusiasts to learn about common Java web vulnerabilities through practical code examples and explanations. It serves as a hands-on educational resource to understand, identify, and fix security issues in Java applications using Spring frameworks.
The online demo site is currently offline due to server expiration; users need to run the application locally. This project is intended for educational purposes and should be used in a safe, isolated environment to avoid security risks. Reviewing the commented fix code is essential to understand proper mitigation techniques.
Clone the repository: git clone https://github.com/JoyChou93/java-sec-code.git
Navigate to the project directory
Build and run the Spring Boot application using your preferred IDE or command line (e.g., ./mvnw spring-boot:run)
Access the application locally to explore vulnerability examples
Use provided login credentials (admin/admin123 or joychou/joychou123) to log ingit clone https://github.com/JoyChou93/java-sec-code.git
Clone the repository to your local machine
./mvnw spring-boot:run
Run the Spring Boot application to start the local server
Access the web app and login with admin/admin123 or joychou/joychou123
Use these credentials to explore the vulnerability demos