项目作者： JasonHinds13

项目描述：

  A python flask app that is purposefully vulnerable to SQL injection and XSS attacks. To be used for demonstrating attacks

高级语言： Python

项目主页：

项目地址: git://github.com/JasonHinds13/hackable.git

创建时间： 2016-10-04T22:27:08Z
项目社区：https://github.com/JasonHinds13/hackable
开源协议：
下载

hackable

A python flask app that is purposfully vulnerable to SQL injection and XSS attacks

How to run

Just cd into the hackable folder and type into the termnial python main.py

test.sql is just there to help to visualize what is happening with sql queries during the demo
Commands For Sqlite Hack.txt is there to show the sql statements used during the demo and explain them
The search page is vulnerable to SQL injections
The add items page is vulnerable to XSS
The login page is also vulnerable to SQL injection making it easy to bypass login