Skip to content

Commit

Permalink
Merge branch 'master' of github.com:juice-shop/pwning-juice-shop
Browse files Browse the repository at this point in the history
# Conflicts:
#	docs/modules/ROOT/pages/attributes.adoc
  • Loading branch information
bkimminich committed Oct 7, 2024
2 parents d7d26ab + bbb2ece commit dcf8feb
Show file tree
Hide file tree
Showing 3 changed files with 8 additions and 8 deletions.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
16 changes: 8 additions & 8 deletions docs/modules/ROOT/pages/appendix/solutions.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -2344,22 +2344,22 @@ solve this challenge
. Request http://localhost:3000/3rdpartylicenses.txt to retrieve the
3rd party license list generated by Angular CLI by default
. Combing through the list of modules you will come across
`anuglar2-qrcode` which openly reveals its intent on
https://www.npmjs.com/package/anuglar2-qrcode
`ngy-cookie` which openly reveals its intent on
https://www.npmjs.com/package/ngy-cookie
+
image::appendix/npm_anuglar2-qrcode.png[anuglar2-qrcode on NPM]
image::appendix/npm_ngy-cookie.png[ngy-cookie on NPM]

. Visit http://localhost:3000/#/contact
. Submit your feedback with `anuglar2-qrcode` in the comment to solve
. Submit your feedback with `ngy-cookie` in the comment to solve
this challenge

You can probably imagine that the typosquatted `anuglar2-qrcode` would
You can probably imagine that the typosquatted `ngy-cookie` would
be _a lot harder_ to distinguish from the original repository
`ngx-bar-rating`, if it where not marked with the _THIS IS *NOT* THE
`ngx-cookie`, if it where not marked with the _THIS IS *NOT* THE
MODULE YOU ARE LOOKING FOR!_-warning at the very top. Below you can see
the original `ngx-bar-rating` module page on NPM:
the original `ngx-cookie` module page on NPM:

image::appendix/npm_angular2-qrcode.png[angular2-qrcode on NPM]
image::appendix/npm_ngx-cookie.png[ngx-cookie on NPM]

=== Give the server something to chew on for quite a while

Expand Down

0 comments on commit dcf8feb

Please sign in to comment.