Skip to content

Commit

Permalink
Merge pull request #193 from stockerts/dev
Browse files Browse the repository at this point in the history
Class 2 Update
  • Loading branch information
lesleycw authored Jan 25, 2024
2 parents 4706a88 + 8a3d439 commit f54eb2f
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions docs/class2/lab2.rst
Original file line number Diff line number Diff line change
Expand Up @@ -91,7 +91,7 @@ Cloud Console.

.. code:: BASH
curl 'http://<namespace>.lab-sec.f5demos.com' --user-agent 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.15'
curl http://<namespace>.lab-sec.f5demos.com --user-agent "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.15"
This HTTP request will not show up in the Security Analytics however you
will find it in Request logging.
Expand Down Expand Up @@ -142,7 +142,7 @@ and understand its implementation.

.. code:: BASH
curl -v 'http://<namespace>.lab-sec.f5demos.com/auth.php' -H 'Content-Type: application/x-www-form-urlencoded' --user-agent 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.15' --data-raw 'identity=user%40f5.com&token=password&submit=Submit'
curl -v http://<namespace>.lab-sec.f5demos.com/auth.php -H "Content-Type: application/x-www-form-urlencoded" --user-agent "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.15" --data-raw "identity=user%40f5.com&token=password&submit=Submit"
For this application, a successful logon will have a 302 response to the
location ./data.php?page=data
Expand Down Expand Up @@ -243,7 +243,7 @@ and understand its implementation.

.. code:: BASH
curl -v 'http://<namespace>.lab-sec.f5demos.com/auth.php' -H 'Content-Type: application/x-www-form-urlencoded' --user-agent 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.15' --data-raw 'identity=user%40f5.com&token=password&submit=Submit'
curl -v http://<namespace>.lab-sec.f5demos.com/auth.php -H "Content-Type: application/x-www-form-urlencoded" --user-agent "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.15" --data-raw "identity=user%40f5.com&token=password&submit=Submit"
As you can see, instead of signaling to a potential attacker that they have
a good or bad password, we have prevented the would-be attacker from
Expand Down

0 comments on commit f54eb2f

Please sign in to comment.