Add solutions for SQL Injection

2023-11-10 13:00:16 +01:00 · 2023-11-10 13:00:16 +01:00 · c7093cd7a8
parent 05066f1c27
commit c7093cd7a8
1 changed files with 22 additions and 0 deletions
--- a/Juice/README.md
+++ b/Juice/README.md
@ -0,0 +1,22 @@
+# Let's Buy Some Juice
+## Booting Up Juice Shop
+```sh
+docker run --pull always -p 127.0.0.1:80:3000 bkimminich/juice-shop
+```
+
+## SQL Injection
+### Login as Admin
+  1. Open `Account` => `Login`
+  2. Type `' OR TRUE; --` into `Email` and any password in `Password`
+
+Result:
+
+<!--- ToDo: Insert Picture -->
+
+### Login as Jim
+  1. Open `Account` => `Login`
+  2. Type `jim@juice-sh.op'; --`
+
+Result:
+
+<!--- ToDo: Insert Picture -->