dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Draft_Version for SQL Injection

Browse Source
This commit is contained in:
Tobias Melzer
2018-10-29 23:45:38 +01:00
committed by Nanne Baars
parent 78ff54b910
commit 8667a85865
10 changed files with 41 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_content6a.adoc
View File

@ -1,6 +1,6 @@
== Try It! Pulling data from other tables
Lets try to exploit a join to another table. One of the tables in the WebGoat database is:
Lets try to exploit the fact that you can append your own SQL Statement. One of the tables in the WebGoat database is:
-------------------------------------------------------
CREATE TABLE user_system_data (userid int not null primary key,
@ -9,7 +9,7 @@ CREATE TABLE user_system_data (userid int not null primary key,
cookie varchar(30));
-------------------------------------------------------
*6.a)* Execute a query to union or join these tables. +
*6.a)* Inject your own Query into the SQL Statement to retrieve all Data from the Table. +
*6.b)* When you have figured it out.... What is Dave's password?