From 63a50df7a1518103eed302994ada534381adcb08 Mon Sep 17 00:00:00 2001 From: Nanne Baars Date: Fri, 6 Jul 2018 18:22:29 +0200 Subject: [PATCH] Add hint to lesson users no longer have guess the complete ip address --- .gitignore | 5 +++-- .../main/resources/lessonPlans/en/SqlInjection_order_by.adoc | 3 ++- 2 files changed, 5 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 85137d053b..32b59f04e0 100644 --- a/.gitignore +++ b/.gitignore @@ -44,5 +44,6 @@ webgoat-server/mongo-data/* webgoat-lessons/vulnerable-components/dependency-reduced-pom.xml **/.sts4-cache/* **/.vscode/* - -/.sonatype \ No newline at end of file +**/.factorypath +/.sonatype +**/bin/* \ No newline at end of file diff --git a/webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_order_by.adoc b/webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_order_by.adoc index 6adb9156bc..6e8ff54e0c 100644 --- a/webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_order_by.adoc +++ b/webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_order_by.adoc @@ -1,4 +1,5 @@ In this assignment try to perform an SQL injection through the ORDER BY field. -Try to find the ip address of the `webgoat-prd` server. +Try to find the ip address of the `webgoat-prd` server, guessing the complete +ip address might take too long so we give you the last part: `xxx.130.219.202` Note: The submit field of this assignment is *NOT* vulnerable for an SQL injection. \ No newline at end of file