# Web_Basic Практическая работа №3
Выполнил Лавров Павел Владимирович
## Задание к практической работе 3 –
### SQL-injection уязвимости
1) Use Burp Suite to intercept and modify the login request. Modify the username parameter, giving it the value: administrator’–


2) Use Burp Suite to intercept and modify the request that sets the product category filter. Modify the category parameter, giving it the value '+OR+1=1–


3) Use Burp Suite to intercept and modify the request that sets the product category filter. Determine the number of columns that are being returned by the query and which columns contain text data. Verify that the query is returning two columns


4) Use Burp Suite to intercept and modify the request that sets the product category filter.Determine the number of columns that are being returned by the query and which columns contain text data. Verify that the query is returning two columns


### XSS уязвимости:

1) Enter the following into the comment box: <script>alert(1)</script>
Enter a name, email and website.Click “Post comment”.


2) Enter a random alphanumeric string into the search box. Right-click and inspect the element, and observe that your random string has been placed inside an img src attribute.


3) Submit a random alphanumeric string in the search box, then use Burp Suite to intercept the search request and send it to Burp Repeater.


4) In Burp Suite, go to the Proxy tool and make sure that the Intercept feature is switched on. Back in the lab, go to the target website and use the search bar to search for a random test string, such as “XSS”.


### CSRF:

1) Open Burp’s browser and log in to your account. Submit the “Update email” form, and find the resulting request in your Proxy history.


2) Open Burp’s browser and log in to your account. Submit the “Update email” form, and find the resulting request in your Proxy history. Send the request to Burp Repeater and observe that if you change the value of the csrf parameter then the request is rejected.


### SSRF:

1) Browse to /admin and observe that you can’t directly access the admin page.


2) Click “next product” and observe that the path parameter is placed into the Location header of a redirection response, resulting in an open redirection.


### RCE:

1) Use Burp Suite to intercept and modify a request that checks the stock level. Modify the storeID parameter, giving it the value 1|whoami


### Path traversal:

1) Use Burp Suite to intercept and modify a request that fetches a product image. Modify the filename parameter, giving it the value: …/…/…/etc/passwd


2) Use Burp Suite to intercept and modify a request that fetches a product image.


ИТОГ