From 608728b135e3cbc95744f375c0f4ce63b56176bf Mon Sep 17 00:00:00 2001 From: Satoshi SAKAO Date: Thu, 9 Apr 2020 17:31:49 +0900 Subject: [PATCH] fix asciidoc italic format --- .../lessonPlans/en/SqlInjection_introduction_content8.adoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_introduction_content8.adoc b/webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_introduction_content8.adoc index 4ae9d690c..bfea14d64 100644 --- a/webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_introduction_content8.adoc +++ b/webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_introduction_content8.adoc @@ -17,7 +17,7 @@ The company has an internal system that allows all employees to see their own in The system requires the employees to use a unique _authentication TAN_ to view their data. + Your current TAN is *3SL99A*. -Since you always have the urge to be the most earning employee, you want to exploit the system and instead of viewing your own internal data, _ you want to take a look at the data of all your colleagues_ to check their current salaries. +Since you always have the urge to be the most earning employee, you want to exploit the system and instead of viewing your own internal data, _you want to take a look at the data of all your colleagues_ to check their current salaries. Use the form below and try to retrieve all employee data from the *employees* table. You should not need to know any specific names or TANs to get the information you need. + You already found out that the query performing your request looks like this: