From adc88911604c179b6e11a25379a2154eaaa8b0c9 Mon Sep 17 00:00:00 2001 From: Benedikt - Desktop Date: Fri, 2 Nov 2018 11:39:51 +0100 Subject: [PATCH] Reworked SQl-Injections Introdruction Lesson plan --- .../lessonPlans/en/SqlInjection_introduction_plan.adoc | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_introduction_plan.adoc b/webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_introduction_plan.adoc index 6fd7064aa..bf014fa3c 100644 --- a/webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_introduction_plan.adoc +++ b/webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_introduction_plan.adoc @@ -4,9 +4,11 @@ This lesson describes what is Structured Query Language (SQL) and how it can be == Goals -* The user should have a basic understand how SQL works and what it is used for. -* The user will understand the best practices for defending against SQL injection attacks +* The user will have a basic understanding of how SQL works and what it is used for +* The user will have a basic understanding of what SQL-Injections are and how they work * The user will demonstrate knowledge on: +** DML, DDL and DCL ** String SQL Injection ** Numeric SQL Injection +** violation of the CIA triad