mirror of
https://github.com/hohn/codeql-dataflow-sql-injection.git
synced 2025-12-16 10:13:04 +01:00
Initial sql injection sample in C using sqlite
This commit is contained in:
21
README.org
Normal file
21
README.org
Normal file
@@ -0,0 +1,21 @@
|
||||
* SQL injection example
|
||||
** Setup and sample run
|
||||
#+BEGIN_SRC sh
|
||||
./build.sh
|
||||
|
||||
./admin create-db
|
||||
./admin show-db
|
||||
|
||||
# Regular user
|
||||
echo "sample user" | ./add-user
|
||||
./admin show-db
|
||||
|
||||
# Johnny Droptable
|
||||
echo "Johnny'); DROP TABLE users; -- " | ./add-user
|
||||
|
||||
./admin show-db
|
||||
|
||||
#+END_SRC
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user