dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added my improved assignments

Browse Source
This commit is contained in:
Tobias Melzer
2018-11-12 20:16:16 +01:00
committed by Nanne Baars
parent 551f87dbd9
commit 718b113f86
11 changed files with 364 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_content6a.adoc
View File

@ -1,6 +1,8 @@
== Try It! Pulling data from other tables
Lets try to exploit the fact that you can append your own SQL Statement. One of the tables in the WebGoat database is:
Lets try to exploit the fact that you can use a union to get the contents of another table.
One of the tables in the WebGoat database is:
-------------------------------------------------------
CREATE TABLE user_system_data (userid int not null primary key,
@ -9,7 +11,5 @@ CREATE TABLE user_system_data (userid int not null primary key,
cookie varchar(30));
-------------------------------------------------------
*6.a)* Inject your own Query into the SQL Statement to retrieve all Data from the Table. +
*6.b)* When you have figured it out.... What is Dave's password?
*6.a)* Retrieve all data from the table by using a UNION (You have to use a union to complete this assignment.) +
*6.b)* When you have figured it out.... What is Dave's password?