Add solutions for SQL Injection

This commit is contained in:
Manuel Thalmann 2023-11-10 13:00:16 +01:00
parent 05066f1c27
commit c7093cd7a8

View file

@ -0,0 +1,22 @@
# Let's Buy Some Juice
## Booting Up Juice Shop
```sh
docker run --pull always -p 127.0.0.1:80:3000 bkimminich/juice-shop
```
## SQL Injection
### Login as Admin
1. Open `Account` => `Login`
2. Type `' OR TRUE; --` into `Email` and any password in `Password`
Result:
<!--- ToDo: Insert Picture -->
### Login as Jim
1. Open `Account` => `Login`
2. Type `jim@juice-sh.op'; --`
Result:
<!--- ToDo: Insert Picture -->