JSEF
CommunityMaster Web Security with Hands-On Labs
Education & Research#vulnerability#secure coding#penetration testing#java#web security#spring boot#hands-on lab
AuthorXiaomingX
Version1.0.0
Installs0
System Documentation
What problem does it solve?
This Skill provides a comprehensive, hands-on framework for learning and practicing web security vulnerabilities in a Spring Boot environment, bridging the gap between theoretical knowledge and practical application.
Core Features & Use Cases
- Vulnerability Reproduction: Offers over 35 real-world vulnerability examples, covering OWASP Top 10 and business logic flaws.
- Comparative Learning: Presents both insecure (
vuln) and secure (sec) code implementations for direct comparison and understanding of fixes. - Complete Learning Loop: Each vulnerability includes principle explanations, reproduction steps, code comparison, and verification of fixes.
- Use Case: A developer can use this Skill to quickly understand and remediate SQL injection vulnerabilities by following the provided examples, comparing the vulnerable code with the secure, parameterized query version.
Quick Start
Use the JSEF skill to generate a new vulnerability case for SQL injection in an e-commerce product search scenario.
Dependency Matrix
Required Modules
org.springdoc:springdoc-openapi-starter-webmvc-uicommons-collections:commons-collectionsjakarta.xml.bind:jakarta.xml.bind-apiorg.glassfish.jaxb:jaxb-runtimeorg.dom4j:dom4jcom.thoughtworks.xstream:xstreamcom.thoughtworks.xstream:xstream-hibernateorg.junit.jupiter:junit-jupiter-apiorg.junit.jupiter:junit-jupiter-engineorg.springframework.boot:spring-boot-starter-thymeleaforg.apache.velocity:velocity-engine-corecom.alibaba:fastjsoncom.h2database:h2com.mysql:mysql-connector-jorg.springframework.boot:spring-boot-starter-jdbcorg.freemarker:freemarkernet.sourceforge.pmd:pmd-javaorg.javassist:javassistorg.mvel:mvel2org.jdom:jdom2xerces:xercesImplorg.openjdk.nashorn:nashorn-coreorg.redisson:redissonorg.codehaus.groovy:groovyorg.jgrapht:jgrapht-corecom.github.javaparser:javaparser-coreorg.soot-oss:sootorg.springframework.boot:spring-boot-starter-securityognl:ognlorg.springframework.boot:spring-boot-starter-testjaxen:jaxencn.hutool:hutool-all
Components
scriptsreferences
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: JSEF Download link: https://github.com/XiaomingX/JSEF/archive/main.zip#jsef Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.