A Flask comment board with registration and login on a MongoDB database running in the same container. The JSON body of the login and comment requests goes straight into MongoDB queries.
Pas commencéDockercommit 75db7a6x86_64 · aarch64Secret
Use MongoDB query operators in the JSON requests to log in as another user and to change comments you do not own (NoSQL injection).
Le brief de ce lab se trouve dans son dépôt.