⛳ Learn JAVA vulnerability!

I. Documents: JavaSecurity101

(Vietnamese)
#0 - Intro & Setup
#1 - Java Reflection
#2 - Java Deserialization – Overview
#3 - Java Deserialization – ysoserial 1
#4 - Java Deserialization – ysoserial 2
#5 - Java Deserialization – ysoserial 3
#6 - Java RMI - Overview
#7 - Java RMI - Exploit
...

II. Challenges

Collection of awesome java CTF challenges, made from everyone on the internet :)

Folder structure:

• challs/challenge-name/README.md: challenge description, give to player
• challs/challenge-name/setup: means setup, not intend to give to player
• challs/challenge-name/solution: short writeup by me, not intend to give to player

Challenges

@	Name	Level
SVATTT2020 - Quals	ascis_rmi_v1	🚀
SVATTT2020 - Quals	ascis_rmi_v2	🚀🚀
SVATTT2020 - Final	mojarra_war	🚀🚀🚀🚀
TetCTF2021	Another Malicious Format 1	🚀🚀
Charity Challenge	charity_chall	🚀🚀