tobi o tobystic

## owasp-juice-shop-writeup.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                tobystic
                / owasp-juice-shop-writeup.md
            
            
              Created
              July 24, 2023 16:59
                — forked from thistehneisen/owasp-juice-shop-writeup.md
            
              
                OWASP Juice Shop Writeup
              
          
    This is a write-up of steps that I've done with OWASP Juice Shop incrementally to solve some of the tasks.
Log in as an admin

Navigate to login form and submit Payload in both fields
Payload: ' OR '1'='1' --
Finding privacy policy page

Navigate Profile => Privacy & Security => Privacy
Finding the score board


## FANNG Levels
## FAANG Levels and equivalents

For Engineering

IC2 - 59,60
IC3 - 61,62
IC4 - 63,64
IC5 - 65,66
IC6 - 67,68

## list-of-curl-options.txt
$ curl --help
Usage: curl [options...] <url>
     --abstract-unix-socket <path> Connect via abstract Unix domain socket
     --alt-svc <file name> Enable alt-svc with this cache file
     --anyauth       Pick any authentication method
 -a, --append        Append to target file when uploading
     --basic         Use HTTP Basic Authentication
     --cacert <file> CA certificate to verify peer against
     --capath <dir>  CA directory to verify peer against
 -E, --cert <certificate[:password]> Client certificate file and password

## Hope is a dangerous thing
Hope is a dangerous thing
-----------------------------

Hope is a fundamental thing
Hoping is what you do when you invest. It's a bet against misfortune
The place of hope is often understated
It's lack of it that makes a politician steal billions for his future grandkids.

It's hope that makes a poor man put in the work, to change his status.
Hope is trusting that your kid comes home alive without a Ted Bundy type story

## About the Utmost

Today I look out at the sun. And I understand that Billionaires in all their splendour cannot give us 10 mins of sunshine.
I also look at the flowers outside my window. Very colorful, yet I do not know any wealthy person able to provide their beauty

I feel like love is a weakness. You have to be vulnerable to experience it and the only index or it's measure, is
the weight of the sacrifices that is made towards it. Even God let his only begotten son go. A love without sacrifice? err

On Dec 3rd 2017, I drove off a bridge in the South side of Seattle. Like Tom Cruise in Vanilla sky, SUV was written off and I had
thought my spinal cord was broken from the sharp pain. I am still playing in a soccer league in 2020. I cannot understand this either.
I may think I do not need Him. But I would be a useless tissue paper without his anchor

## fetch alert rules using REST API call
_fetch information using REST API call via powershell*_
--------------------------------------------------------


(Culled from Gary Busheyllc's webpage)

To use one, select it from the list.  In the detail pane on the right side of the screen, click on the Create rule button to create the rule (looks like Microsoft just changed the functionality so that you can create the rule from template whether or not you have the proper data sources), then fill in the required fields (usually the defaults that get filled in from the template are good enough) and create it.  Instant, or almost instant, Analytic rule

How can we get this listing of templates ourselves?  We can make the REST call to get them.  I will not go through all the steps needed to make the call since that was covered in Your first Azure Sentinel REST API call so I will just show you the differences from the call that was previous covered.

## stars.html
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>Star Rating System</title>
    <meta name="viewport" content="width=device-width">
    <style>
        .star{
          color: goldenrod;
          font-size: 2.0rem;
	## FAANG Levels and equivalents

	For Engineering

	IC2 - 59,60
	IC3 - 61,62
	IC4 - 63,64
	IC5 - 65,66
	IC6 - 67,68
	$ curl --help
	Usage: curl [options...] <url>
	--abstract-unix-socket <path> Connect via abstract Unix domain socket
	--alt-svc <file name> Enable alt-svc with this cache file
	--anyauth Pick any authentication method
	-a, --append Append to target file when uploading
	--basic Use HTTP Basic Authentication
	--cacert <file> CA certificate to verify peer against
	--capath <dir> CA directory to verify peer against
	-E, --cert <certificate[:password]> Client certificate file and password
	Hope is a dangerous thing
	-----------------------------

	Hope is a fundamental thing
	Hoping is what you do when you invest. It's a bet against misfortune
	The place of hope is often understated
	It's lack of it that makes a politician steal billions for his future grandkids.

	It's hope that makes a poor man put in the work, to change his status.
	Hope is trusting that your kid comes home alive without a Ted Bundy type story

	Today I look out at the sun. And I understand that Billionaires in all their splendour cannot give us 10 mins of sunshine.
	I also look at the flowers outside my window. Very colorful, yet I do not know any wealthy person able to provide their beauty

	I feel like love is a weakness. You have to be vulnerable to experience it and the only index or it's measure, is
	the weight of the sacrifices that is made towards it. Even God let his only begotten son go. A love without sacrifice? err

	On Dec 3rd 2017, I drove off a bridge in the South side of Seattle. Like Tom Cruise in Vanilla sky, SUV was written off and I had
	thought my spinal cord was broken from the sharp pain. I am still playing in a soccer league in 2020. I cannot understand this either.
	I may think I do not need Him. But I would be a useless tissue paper without his anchor
	_fetch information using REST API call via powershell*_
	--------------------------------------------------------



	(Culled from Gary Busheyllc's webpage)

	To use one, select it from the list. In the detail pane on the right side of the screen, click on the Create rule button to create the rule (looks like Microsoft just changed the functionality so that you can create the rule from template whether or not you have the proper data sources), then fill in the required fields (usually the defaults that get filled in from the template are good enough) and create it. Instant, or almost instant, Analytic rule

	How can we get this listing of templates ourselves? We can make the REST call to get them. I will not go through all the steps needed to make the call since that was covered in Your first Azure Sentinel REST API call so I will just show you the differences from the call that was previous covered.
	<!DOCTYPE html>
	<html lang="en">
	<head>
	<meta charset="UTF-8">
	<title>Star Rating System</title>
	<meta name="viewport" content="width=device-width">
	<style>
	.star{
	color: goldenrod;
	font-size: 2.0rem;