fastjson-jsontype-rce-lab
dinosn
Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fastjson2 2.0.57: attacker @type reaches loadClass with autoType DISABLED via polymorphic types (@JSONType(seeAlso) / Jackson @JsonSubTypes). Marker-only payloads; safeMode + JDK17 controls.
Growth over time
5 data points · 2026-08-02 → 2026-11-01How do you feel about this project?
Ask AI about fastjson-jsontype-rce-lab
Question copied to clipboardWhat is the dinosn/fastjson-jsontype-rce-lab GitHub project? Description: "Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fastjson2 2.0.57: attacker @type reaches loadClass with autoType DISABLED via polymorphic types (@JSONType(seeAlso) / Jackson @JsonSubTypes). Marker-only payloads; safeMode + JDK17 controls.". Written in Python. Explain what it does, its main use cases, key features, and who would benefit from using it.
Question is copied to clipboard — paste it after the AI opens.
🏆 Show off this rank
Add it to a GitHub README or profile — the card updates as the ranking changes:
How to clone fastjson-jsontype-rce-lab
Clone via HTTPS
Clone via SSH
Download ZIP
Download master.zipFound an issue?
Report bugs or request features on the fastjson-jsontype-rce-lab issue tracker:
Open GitHub Issues