dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Initial Commit of SSRF Lesson

Browse Source
This commit is contained in:
Alex Fry
2019-01-21 18:09:31 -04:00
parent 5ba6492684
commit 98f75e34d5
17 changed files with 494 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

52
webgoat-lessons/ssrf/src/test/java/org/owasp/webgoat/plugin/SSRFTest1.java Normal file
View File

@ -0,0 +1,52 @@
package org.owasp.webgoat.plugin;
import org.junit.Before;
import org.junit.Test;
import org.junit.runner.RunWith;
import org.owasp.webgoat.plugins.LessonTest;
import org.springframework.test.context.junit4.SpringJUnit4ClassRunner;
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
import org.springframework.test.web.servlet.result.MockMvcResultHandlers;
import org.springframework.test.web.servlet.setup.MockMvcBuilders;
import static org.hamcrest.Matchers.is;
import static org.mockito.Mockito.when;
import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.jsonPath;
import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status;
/**
* @author afry
* @since 12/28/18.
*/
@RunWith(SpringJUnit4ClassRunner.class)
public class SSRFTest1 extends LessonTest {
@Before
public void setup() throws Exception {
SSRF ssrf = new SSRF();
when(webSession.getCurrentLesson()).thenReturn(ssrf);
this.mockMvc = MockMvcBuilders.webAppContextSetup(this.wac).build();
}
@Test
public void modifyUrlTom() throws Exception {
mockMvc.perform(MockMvcRequestBuilders.post("/SSRF/task1")
.param("url", "images/tom.png"))
.andExpect(status().isOk()).andExpect(jsonPath("$.lessonCompleted", is(false)));
}
@Test
public void modifyUrlJerry() throws Exception {
mockMvc.perform(MockMvcRequestBuilders.post("/SSRF/task1")
.param("url", "images/jerry.png"))
.andExpect(status().isOk()).andExpect(jsonPath("$.lessonCompleted", is(true)));
}
@Test
public void modifyUrlCat() throws Exception {
mockMvc.perform(MockMvcRequestBuilders.post("/SSRF/task1")
.param("url", "images/cat.jpg"))
.andExpect(status().isOk()).andExpect(jsonPath("$.lessonCompleted", is(false)));
}
}

45
webgoat-lessons/ssrf/src/test/java/org/owasp/webgoat/plugin/SSRFTest2.java Normal file
View File

@ -0,0 +1,45 @@
package org.owasp.webgoat.plugin;
import org.junit.Before;
import org.junit.Test;
import org.junit.runner.RunWith;
import org.owasp.webgoat.plugins.LessonTest;
import org.springframework.test.context.junit4.SpringJUnit4ClassRunner;
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
import org.springframework.test.web.servlet.result.MockMvcResultHandlers;
import org.springframework.test.web.servlet.setup.MockMvcBuilders;
import static org.hamcrest.Matchers.is;
import static org.mockito.Mockito.when;
import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.jsonPath;
import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status;
/**
* @author afry
* @since 12/28/18.
*/
@RunWith(SpringJUnit4ClassRunner.class)
public class SSRFTest2 extends LessonTest {
@Before
public void setup() throws Exception {
SSRF ssrf = new SSRF();
when(webSession.getCurrentLesson()).thenReturn(ssrf);
this.mockMvc = MockMvcBuilders.webAppContextSetup(this.wac).build();
}
@Test
public void modifyUrlIfconfigPro() throws Exception {
mockMvc.perform(MockMvcRequestBuilders.post("/SSRF/task2")
.param("url", "http://ifconfig.pro"))
.andExpect(status().isOk()).andExpect(jsonPath("$.lessonCompleted", is(true)));
}
@Test
public void modifyUrlCat() throws Exception {
mockMvc.perform(MockMvcRequestBuilders.post("/SSRF/task2")
.param("url", "images/cat.jpg"))
.andExpect(status().isOk()).andExpect(jsonPath("$.lessonCompleted", is(false)));
}
}