Skip to content

Commit d443eb3

Browse files
committed
Updated README
1 parent b9ec2c3 commit d443eb3

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

README.md

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,11 @@
11
# hackable
2-
A python flask app that is purposfully vulnerable to SQL injection attacks
2+
A python flask app that is purposfully vulnerable to SQL injection and XSS attacks
33

44
# How to run
55
Just `cd` into the hackable folder and type into the termnial `python main.py`
66

77
# Notes
88
* test.sql is just there to help to visualize what is happening with sql queries during the demo
99
* Commands For Sqlite Hack.txt is there to show the sql statements used during the demo and explain them
10-
* makeDB.py is the python script used to create and put the initial data in sample.db (The Database)
10+
* The search page is vulnerable to SQL injections
11+
* The add items page is vulnerable to XSS

0 commit comments

Comments
 (0)