PrototypeCommon
dinosn/fastjson-jsontype-rce-lab
Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fastjson2 2.0.57: attacker @type reaches loadClass with autoType DISABLED via polymorphic types (@JSONType(seeAlso) / Jackson @JsonSubTypes). Marker-only payloads;…
- Owner
- dinosn (personal account)
- Stars
- Stars: 207
- Forks
- Forks: 93
- Language
- Python
- License
- MIT
- Created
- 2026
- Topics
- appsecdeserializationfastjsonjsontypepocrcesecuritysecurity-labspring-bootssrf
- Tier
- Prototype (100 to 249 ★) What this tier means
More repos by dinosn
All 5 repos by dinosn- dinosn/raptor-loop-huntStars: 270PythonAlpha
- dinosn/CVE-2022-22963Stars: 118PythonPrototype
- dinosn/php-cve-2026-10961x-lab-pocStars: 114PythonPrototype
- dinosn/mikrotrick-pocStars: 103PythonPrototype
Nearby in Python
All Python repos- HarnessRouter/SystemOneHarnessStars: 207PythonPrototype
- llm-xiaoye/douyin-to-obsidianStars: 207PythonPrototype
- Seagey/couch-tvStars: 207PythonPrototype
- bashu/django-secretballotStars: 207PythonPrototype
- ask/python-github2Stars: 207PythonPrototype
- bozhu/AES-PythonStars: 207PythonPrototype