dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added an assignment for compromising availability to the sql injections (introduction).

Browse Source 
WIP
This commit is contained in:
Benedikt - Desktop
2018-11-05 19:39:22 +01:00
committed by Nanne Baars
parent 4e6c721545
commit 6fe7582dfb
7 changed files with 136 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
webgoat-lessons/sql-injection/src/main/resources/html/SqlInjection.html
View File

@ -86,7 +86,8 @@
<form class="attack-form" accept-charset="UNKNOWN"
method="POST" name="form"
action="/WebGoat/SqlInjection/attack9"
enctype="application/json;charset=UTF-8">
enctype="application/json;charset=UTF-8"
autocomplete="off">
<table>
<tr>
<td><label>Employee Name:</label></td>
@ -109,19 +110,20 @@
<div class="lesson-page-wrapper">
<div class="adoc-content" th:replace="doc:SqlInjection_introduction_content10.adoc"></div>
<div class="adoc-content" th:replace="doc:SqlInjection_introduction_content8.adoc"></div>
<div class="attack-container">
<div class="assignment-success"><i class="fa fa-2 fa-check hidden" aria-hidden="true"></i></div>
<form class="attack-form" accept-charset="UNKNOWN"
method="POST" name="form"
action="/WebGoat/SqlInjection/attack5a"
enctype="application/json;charset=UTF-8">
action="/WebGoat/SqlInjection/attack10"
enctype="application/json;charset=UTF-8"
autocomplete="off">
<table>
<tr>
<td>Account Name:</td>
<td><input name="account" value="" type="TEXT"/></td>
<td><input
name="Get Account Info" value="Get Account Info" type="SUBMIT"/></td>
<td><label>Action contains:</label></td>
<td><input name="action" value="" type="TEXT"/></td>
</tr>
<tr>
<td><button type="SUBMIT">Search logs</button></td>
</tr>
</table>
</form>