Based on the project jackson-rce-via-spel this project serves as an example web application to test multiple attack vectors (file upload, forms) on the Jackson-databind vulnerability.

Based on an Angular7 frontend and a spring-boot backend different attack vectors can be tested and the results visualized and checked.

Build and package spring boot and angular7 into a deployable war file.

mvn package

Which automatically opens a web browser at https://localhost:4200.

backend/mvn spring-boot:run