From d20c9c5b9fc1e08589a3589e6af77ae545047355 Mon Sep 17 00:00:00 2001 From: Sander Hautvast Date: Tue, 6 Feb 2024 10:23:16 +0100 Subject: [PATCH] Create proof --- Sectraining/proof | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 Sectraining/proof diff --git a/Sectraining/proof b/Sectraining/proof new file mode 100644 index 0000000..4a06ed8 --- /dev/null +++ b/Sectraining/proof @@ -0,0 +1,16 @@ +## blabla1337/owasp-skf-lab:java-csrf + +```bash +docker run -p5000:5000 blabla1337/owasp-skf-lab:java-csrf +``` + +spring-boot +-> admin/admin -> src/main/resources/data.sql + + +```bash +curl 'http://localhost:5000/update' \ + -H 'Content-Type: application/x-www-form-urlencoded' \ + -H 'Cookie: JSESSIONID=DA8353D048C3C8B90D33596A10B2B360' \ + --data-raw 'color=yellow2' +```