search

globocom / secDevLabs

A laboratory for learning secure web and mobile development in a practical manner.
BSD 3-Clause "New" or "Revised" License
899 stars 432 forks source link

Create another app for A1 - Injection #277

Closed spimpaov closed 5 years ago

spimpaov commented 5 years ago

We currently only have one app for A1 (Injection) topic containing an SQL Injection vulnerability. Since Injection is a big topic, it would be awesome if we had another application approaching a different type of Injection, like:

and many more!

This new app could also be written in a different language than the current one (Golang). Some suggestions are:

You can check our Contributing Guidelines on creating a new app.

vitor-fernandes commented 5 years ago

Hi, I have a application with NoSQL (MongoDB) Injection example, I'll submit a PR with the application.

rafaveira3 commented 5 years ago

Awesome, @vitor-fernandes! 🚀 Sounds great a NoSQL example! Let us know if you need any help on the attack narrative, docker-compose, etc.

vitor-fernandes commented 5 years ago

Thanks for helping. I think that I got do it, sent a PR with the application

vitor-fernandes commented 5 years ago

Hey, if possible I can do 2 more applications with Command Injection and SSTI :)

spimpaov commented 5 years ago

That would be great @vitor-fernandes!! We'll be reviewing your NoSQL app soon!

v0idpwn commented 5 years ago

Hey, I've a concluded command injection example. Should I PR it? :)