From c7093cd7a8dc84ae34abcb6ed23d9ae2ff68e5c9 Mon Sep 17 00:00:00 2001 From: Manuel Thalmann Date: Fri, 10 Nov 2023 13:00:16 +0100 Subject: [PATCH] Add solutions for SQL Injection --- Lab03 - Let's Buy Some Juice/README.md | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 Lab03 - Let's Buy Some Juice/README.md diff --git a/Lab03 - Let's Buy Some Juice/README.md b/Lab03 - Let's Buy Some Juice/README.md new file mode 100644 index 0000000..2c13955 --- /dev/null +++ b/Lab03 - Let's Buy Some Juice/README.md @@ -0,0 +1,22 @@ +# Let's Buy Some Juice +## Booting Up Juice Shop +```sh +docker run --pull always -p 127.0.0.1:80:3000 bkimminich/juice-shop +``` + +## SQL Injection +### Login as Admin + 1. Open `Account` => `Login` + 2. Type `' OR TRUE; --` into `Email` and any password in `Password` + +Result: + + + +### Login as Jim + 1. Open `Account` => `Login` + 2. Type `jim@juice-sh.op'; --` + +Result: + +