d1e44bbc98
* better check on host and port for password reset and make context roots more flexible * spotless applied * removed hardcoded /WebGoat from js * removed hardcoded /WebGoat from js * fix spotless * fix scoreboard * upgrade WebWolf bootstrap version and icons and templates - part 1 * fixed more bootstrap 5 style issues and context path issues * organized WebSecurityConfig based on latest conventions and added basic support for oauth (more work needed) * spotless applied * added mock bean * requires updates to properties - commented for now * requires updates to properties - commented for now * oauth secrets through env values * user creation after oauth login * integration test against non default context paths * adjusted StartupMessage * add global model element username * conditionally show login oauth links * fixed WebWolf login --------- Co-authored-by: René Zubcevic <rene@Mac-mini-van-Rene.local>
62 lines
2.2 KiB
Java
62 lines
2.2 KiB
Java
package org.owasp.webgoat;
|
|
|
|
import java.util.HashMap;
|
|
import java.util.Map;
|
|
import org.junit.jupiter.api.Test;
|
|
|
|
public class SqlInjectionAdvancedIntegrationTest extends IntegrationTest {
|
|
|
|
@Test
|
|
public void runTests() {
|
|
startLesson("SqlInjectionAdvanced");
|
|
|
|
Map<String, Object> params = new HashMap<>();
|
|
params.clear();
|
|
params.put("username_reg", "tom' AND substring(password,1,1)='t");
|
|
params.put("password_reg", "password");
|
|
params.put("email_reg", "someone@microsoft.com");
|
|
params.put("confirm_password", "password");
|
|
checkAssignmentWithPUT(url("SqlInjectionAdvanced/challenge"), params, true);
|
|
|
|
params.clear();
|
|
params.put("username_login", "tom");
|
|
params.put("password_login", "thisisasecretfortomonly");
|
|
checkAssignment(url("SqlInjectionAdvanced/challenge_Login"), params, true);
|
|
|
|
params.clear();
|
|
params.put("userid_6a", "'; SELECT * FROM user_system_data;--");
|
|
checkAssignment(url("SqlInjectionAdvanced/attack6a"), params, true);
|
|
|
|
params.clear();
|
|
params.put(
|
|
"userid_6a",
|
|
"Smith' union select userid,user_name, user_name,user_name,password,cookie,userid from"
|
|
+ " user_system_data --");
|
|
checkAssignment(url("SqlInjectionAdvanced/attack6a"), params, true);
|
|
|
|
params.clear();
|
|
params.put("userid_6b", "passW0rD");
|
|
checkAssignment(url("SqlInjectionAdvanced/attack6b"), params, true);
|
|
|
|
params.clear();
|
|
params.put(
|
|
"question_0_solution",
|
|
"Solution 4: A statement has got values instead of a prepared statement");
|
|
params.put("question_1_solution", "Solution 3: ?");
|
|
params.put(
|
|
"question_2_solution",
|
|
"Solution 2: Prepared statements are compiled once by the database management system"
|
|
+ " waiting for input and are pre-compiled this way.");
|
|
params.put(
|
|
"question_3_solution",
|
|
"Solution 3: Placeholders can prevent that the users input gets attached to the SQL query"
|
|
+ " resulting in a seperation of code and data.");
|
|
params.put(
|
|
"question_4_solution",
|
|
"Solution 4: The database registers 'Robert' ); DROP TABLE Students;--'.");
|
|
checkAssignment(url("SqlInjectionAdvanced/quiz"), params, true);
|
|
|
|
checkResults("/SqlInjectionAdvanced/");
|
|
}
|
|
}
|