对 CVE-2017-5638（Apache Struts2 远程代码执行漏洞）的动手模拟，展示漏洞利用重现、操作系统级命令执行以及输入清理和端点监控等缓解措施。基于 Python/Flask 构建，附带 Jupyter notebook 演示。
Educational repo demonstrating real-world software vulnerabilities: Apache Struts2 CVE-2017-5638 RCE, data exfiltration, weak encryption, and mitigation strategies (sanitization, monitoring, crypto best practices).
Red team vs blue team demo of OS security flaws: exploit, persistence (backdoor), and defense techniques (monitoring, TLS validation).
