Web Vulnerability's: Introduction and SQL Injection

This week we have two topics

• A Recap of Web Fundamentals
• A Closer look at Injection based attacks

Recap Materials

You should know all of the web fundamentals stuff. So shouldn't need to concentrate too much on it. However, I have added it for reference.

The Web Trainer

For the next set of tasks I have setup a docker container that has examples. You can find the docker compose file

Instructions for the Trainer

1. Make sure you have docker installed

2. Install docker-compose
   

   $sudo pip3 install docker-compose
   

3. Download the docker compose file

4. Run the compose file with

   $sudo docker-compose up
   

5. There will now be a website running on your machine at 172.18.0.1

Using WSL

If you are using WSL the address will be the address of your WSL container. You can find this with ip addr