Skip to content

Commit

Permalink
Merge pull request #32 from ctognini/master
Browse files Browse the repository at this point in the history 
#14212, #14213, #14210: Create CSRF tab with varying form tags, multi…
  • Loading branch information
@stuken
stuken committed Apr 1, 2016
2 parents e95b264 + 65a4ccc commit 38242f1
Show file tree
Hide file tree
Showing 8 changed files with 395 additions and 3 deletions.
79 changes: 79 additions & 0 deletions src/main/java/com/waratek/spiracle/csrf/CSRFServlet.java
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,79 @@
/*
* Copyright 2016 Waratek Ltd.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package com.waratek.spiracle.csrf;

import java.io.BufferedWriter;
import java.io.File;
import java.io.FileWriter;
import java.io.IOException;
import java.util.Scanner;

import javax.servlet.ServletException;
import javax.servlet.annotation.WebServlet;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

import javax.servlet.ServletContext;
import javax.servlet.ServletOutputStream;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import org.apache.log4j.Logger;

/**
* Servlet implementation class CSRFServlet
*/
@WebServlet("/CSRFServlet")
public class CSRFServlet extends HttpServlet {
private static final Logger logger = Logger.getLogger(CSRFServlet.class);
private static final long serialVersionUID = 1L;

/**
* @see HttpServlet#HttpServlet()
*/
public CSRFServlet() {
super();
// TODO Auto-generated constructor stub
}

/**
* @see HttpServlet#doGet(HttpServletRequest request, HttpServletResponse response)
*/
protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
executeRequest(request, response, "Get requests work fine!");
}

/**
* @see HttpServlet#doPost(HttpServletRequest request, HttpServletResponse response)
*/
protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
executeRequest(request, response, "Post requests work fine!");
}

private void executeRequest(HttpServletRequest request, HttpServletResponse response, String message) throws ServletException, IOException {

String name = request.getParameter("name");

response.setHeader("Content-Type", "text/html;charset=UTF-8");
ServletOutputStream out = response.getOutputStream();

out.println("Hello " + name + "<br/>");
out.println(message);

}
}
307 changes: 307 additions & 0 deletions src/main/webapp/csrf.jsp
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,307 @@
<%@ page language="java" contentType="text/html; charset=UTF-8"
pageEncoding="UTF-8"%>
<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<link rel="stylesheet" type="text/css" href="css/bootstrap.min.css">
<link rel="stylesheet" type="text/css"
href="css/bootstrap-theme.min.css">
<link rel="stylesheet" type="text/css" href="css/style.css">

<title>Spiracle - CSRF</title>
</head>

<body>
<div class="navbar navbar-default navbar-fixed-top" role="navigation">
<div class="container">
<div class="navbar-header">
<button type="button" class="navbar-toggle collapsed"
data-toggle="collapse" data-target=".navbar-collapse">
<span class="sr-only">Toggle navigation</span> <span
class="icon-bar"></span> <span class="icon-bar"></span> <span
class="icon-bar"></span>
</button>
<a class="navbar-brand" href="index.jsp">Spiracle</a>
</div>
<div class="navbar-collapse collapse">
<ul class="nav navbar-nav">
<li><a href="index.jsp">Overview</a></li>
<li><a href="file.jsp">File</a></li>
<li><a href="network.jsp">Network</a></li>
<li><a href="sql.jsp">SQL</a></li>
<li><a href="xss.jsp">XSS</a></li>
<li class="active"><a href="csrf.jsp">CSRF</a></li>
<li><a href="misc.jsp">Misc</a></li>
</ul>
</div>
</div>
</div>

<div class="container">
<h1>CSRF</h1>


<div class="panel panel-default">

<div class="panel-heading">Form tags for method attribute: post</div>
<div class="panel-body">

<p>
<br/><i>method attribute is: method="post"</i>
</p>
<form id="csrfForm" action="CSRFServlet" method="post">
Name: <input type="text" name="name">
<input type="submit" value=Submit>
</form>
<p>
<br/><i>method attribute is: method="POST"</i>
</p>
<form id="csrfForm" action="CSRFServlet" method="POST">
Name: <input type="text" name="name">
<input type="submit" value=Submit>
</form>
<p>
<br/><i>method attribute is: method="Post"</i>
</p>
<form id="csrfForm" action="CSRFServlet" method="Post">
Name: <input type="text" name="name">
<input type="submit" value=Submit>
</form>
<p>
<br/><i>method attribute is: method="pOSt"</i>
</p>
<form id="csrfForm" action="CSRFServlet" method="pOSt">
Name: <input type="text" name="name">
<input type="submit" value=Submit>
</form>
<p>
<br/><i>method attribute is: method='post'</i>
</p>
<form id="csrfForm" action="CSRFServlet" method='post'>
Name: <input type="text" name="name">
<input type="submit" value=Submit>
</form>
<p>
<br/><i>method attribute is: method=post</i>
</p>
<form id="csrfForm" action="CSRFServlet" method=post>
Name: <input type="text" name="name">
<input type="submit" value=Submit>
</form>
<p>
<br/><i>method attribute is: method &nbsp;&nbsp; ="post"</i>
</p>
<form id="csrfForm" action="CSRFServlet" method ="post">
Name: <input type="text" name="name">
<input type="submit" value=Submit>
</form>
<p>
<br/><i>method attribute is: method = "post"</i>
</p>
<form id="csrfForm" action="CSRFServlet" method = "post">
Name: <input type="text" name="name">
<input type="submit" value=Submit>
</form>
<p>
<br/><i>method attribute is: METHOD="post"</i>
</p>
<form id="csrfForm" action="CSRFServlet" METHOD="post">
Name: <input type="text" name="name">
<input type="submit" value=Submit>
</form>
</div>


<div class="panel-heading">Form tags for method attribute: get</div>
<div class="panel-body">

<p>
<br/><i>method attribute is: method="get"</i>
</p>
<form id="csrfForm" action="CSRFServlet" method="get">
Name: <input type="text" name="name">
<input type="submit" value=Submit>
</form>
<p>
<br/><i>method attribute is: method="GET"</i>
</p>
<form id="csrfForm" action="CSRFServlet" method="GET">
Name: <input type="text" name="name">
<input type="submit" value=Submit>
</form>
<p>
<br/><i>method attribute is: method="Get"</i>
</p>
<form id="csrfForm" action="CSRFServlet" method="Get">
Name: <input type="text" name="name">
<input type="submit" value=Submit>
</form>
<p>
<br/><i>method attribute is: method="gEt"</i>
</p>
<form id="csrfForm" action="CSRFServlet" method="gEt">
Name: <input type="text" name="name">
<input type="submit" value=Submit>
</form>
<p>
<br/><i>method attribute is: method='get'</i>
</p>
<form id="csrfForm" action="CSRFServlet" method='get'>
Name: <input type="text" name="name">
<input type="submit" value=Submit>
</form>
<p>
<br/><i>method attribute is: method=get</i>
</p>
<form id="csrfForm" action="CSRFServlet" method=get>
Name: <input type="text" name="name">
<input type="submit" value=Submit>
</form>
<p>
<br/><i>method attribute is: method &nbsp;&nbsp; ="get"</i>
</p>
<form id="csrfForm" action="CSRFServlet" method ="get">
Name: <input type="text" name="name">
<input type="submit" value=Submit>
</form>
<p>
<br/><i>method attribute is: method = "get"</i>
</p>
<form id="csrfForm" action="CSRFServlet" method = "get">
Name: <input type="text" name="name">
<input type="submit" value=Submit>
</form>
<p>
<br/><i>method attribute is: METHOD="get"</i>
</p>
<form id="csrfForm" action="CSRFServlet" METHOD="get">
Name: <input type="text" name="name">
<input type="submit" value=Submit>
</form>
</div>


<div class="panel-heading">Form tags for misc combinations of method attributes</div>
<div class="panel-body">
<p>
<br/><i>Method attribute "post" is 1/1 attributes</i>
</p>
<form method="post">
Name: <input type="text" name="name">
<input type="submit" value=Submit>
</form>
<p>
<br/><i>Method attribute "post" is 2/2 attributes</i>
</p>
<form foo=bar method="post">
Name: <input type="text" name="name">
<input type="submit" value=Submit>
</form>
<p>
<br/><i>Method attribute "post" is 2/3 attributes</i>
</p>
<form foo=bar method="post" action=foobar>
Name: <input type="text" name="name">
<input type="submit" value=Submit>
</form>
<p>
<br/><i>Method attribute "post" is 3/4 attributes</i>
</p>
<form foo=bar blah=blah method="post" action=foobar>
Name: <input type="text" name="name">
<input type="submit" value=Submit>
</form>
<p>
<br/><i>Method attribute for "post" then "get"</i>
</p>
<form id="csrfForm" action="CSRFServlet" method="post" method="get">
Name: <input type="text" name="name">
<input type="submit" value=Submit>
</form>
<p>
<br/><i>Method attribute for "get" then "post"</i>
</p>
<form id="csrfForm" action="CSRFServlet" method="get" method="post">
Name: <input type="text" name="name">
<input type="submit" value=Submit>
</form>
<p>
<br/><i>No method attributes</i>
</p>
<form id="csrfForm" action="CSRFServlet">
Name: <input type="text" name="name">
<input type="submit" value=Submit>
</form>
</div>
</div>


<div class="panel panel-default">

<div class="panel-heading">a href tags</div>
<div class="panel-body">
<a href="index.jsp">a href="index.jsp"</a><br/>
<a href='index.jsp'>a href='index.jsp'</a><br/>
<a href=index.jsp>a href=index.jsp</a><br/>
<a href = "index.jsp">a href = "index.jsp"</a><br/>
<a HREF="index.jsp">A HREF="index.jsp"</a><br/>
<a href="http://www.google.com">a href="http://www.google.com"</a><br/>
<a href="google.com">a href="google.com"</a><br/>
<a href="#">a href="#"</a><br/>
</div>
</div>


<div class="panel panel-default">
<div class="panel-heading">iframe tags</div>
<div class="panel-body">
<iframe src="index.jsp"></iframe>
<iframe src='index.jsp'></iframe>
<iframe src=index.jsp></iframe>
<iframe src = "index.jsp"></iframe>
<IFRAME src="index.jsp"></iframe>
<iframe src="http://www.google.com"></iframe>
<iframe src='http://www.google.com'></iframe>
<iframe src=http://www.google.com></iframe>
<iframe src = "http://www.google.com"></iframe>
<IFRAME src="http://www.google.com"></iframe>
</div>
</div>


<div class="panel panel-default">
<div class="panel-heading">Parameter Pollution</div>
<div class="panel-body">
<p>
<br/><i>Form tag, method attribute is: method="post"</i>
</p>
<form id="csrfForm" action="CSRFServlet" method="post">
Name: <input type="text" name="name">
<input type="submit" value=Submit>
<input type="hidden" name="_WARATEK_CSRF_TOKEN" value="notACsrfToken_onlyUsedForParamPollutionTest=" />
</form>
</div>
</div>
</div>


<footer class="footer">
<div class="container">
<ul class="list-inline">
<li><a href="./LICENSE.html">License</a></li>
<li>&middot;</li>
<li><a href="https://github.com/waratek/spiracle">GitHub</a></li>
<li>&middot;</li>
<li><a href="https://github.com/waratek/spiracle/releases">Releases</a></li>
</ul>
</div>
</footer>

<!-- Bootstrap core JavaScript
================================================== -->
<!-- Placed at the end of the document so the pages load faster -->
<script src="js/jquery.min.js"></script>
<script src="js/bootstrap.min.js"></script>
</body>
</html>
1 change: 1 addition & 0 deletions src/main/webapp/file.jsp
View file
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,7 @@
<li><a href="network.jsp">Network</a></li>
<li><a href="sql.jsp">SQL</a></li>
<li><a href="xss.jsp">XSS</a></li>
<li><a href="csrf.jsp">CSRF</a></li>
<li><a href="misc.jsp">Misc</a></li>
</ul>
</div>
Expand Down
Loading

0 comments on commit 38242f1

Please sign in to comment.