initial sec vulns

Author: scottsauber

2023-10-25-Internal-10SecurityVulnerabilities/10 Security Vulnerabilities.pdf

@@ -0,0 +1,16 @@
+
+Microsoft Visual Studio Solution File, Format Version 12.00
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "SecurityVulnerabilities", "src\SecurityVulnerabilities\SecurityVulnerabilities.csproj", "{ED481F32-3DEB-4190-B679-DF1B86069C9C}"
+EndProject
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Release|Any CPU = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(ProjectConfigurationPlatforms) = postSolution
+		{ED481F32-3DEB-4190-B679-DF1B86069C9C}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{ED481F32-3DEB-4190-B679-DF1B86069C9C}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{ED481F32-3DEB-4190-B679-DF1B86069C9C}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{ED481F32-3DEB-4190-B679-DF1B86069C9C}.Release|Any CPU.Build.0 = Release|Any CPU
+	EndGlobalSection
+EndGlobal

2023-10-25-Internal-10SecurityVulnerabilities/10 Security Vulnerabilities.pptx

@@ -0,0 +1,21 @@
+version: "3.9"
+
+services:
+  db:
+    container_name: postgres
+    image: postgres:13.6-alpine
+    environment:
+      - POSTGRES_DB=a_site_to_order_stuff_local
+      - POSTGRES_USER=postgres
+      - POSTGRES_PASSWORD=postgres
+    ports:
+      - "5433:5432"
+
+  flyway:
+    container_name: flyway
+    image: "flyway/flyway:8.5-alpine"
+    command: -url=jdbc:postgresql://db:5432/a_site_to_order_stuff_local -user=postgres -password=postgres -connectRetries=60 migrate
+    volumes:
+      - ./sql/:/flyway/sql
+    depends_on:
+      - db

2023-10-25-Internal-10SecurityVulnerabilities/SecurityVulnerabilities.sln

@@ -0,0 +1,6 @@
+CREATE TABLE customers
+(
+    id         SERIAL PRIMARY KEY,
+    first_name varchar(100) not null,
+    last_name  varchar(100) not null
+);

2023-10-25-Internal-10SecurityVulnerabilities/docker-compose.yml

@@ -0,0 +1,5 @@
+CREATE TABLE documents
+(
+    id         uuid DEFAULT gen_random_uuid() PRIMARY KEY,
+    file_path varchar(100) not null
+);

2023-10-25-Internal-10SecurityVulnerabilities/sql/V1__create_customers_table.sql

@@ -0,0 +1,8 @@
+namespace SecurityVulnerabilities.Controllers;
+
+public class Customer
+{
+    public long Id { get; set; }
+    public string FirstName { get; set; }
+    public string LastName { get; set; }
+}

2023-10-25-Internal-10SecurityVulnerabilities/sql/V2__create_documents_table.sql

@@ -0,0 +1,30 @@
+using Dapper;
+using Microsoft.AspNetCore.Mvc;
+using Npgsql;
+using SecurityVulnerabilities.Controllers;
+
+namespace SecurityVulnerabilities.Customers;
+
+[ApiController]
+[Route("[controller]")]
+public class SafeCustomersController : ControllerBase
+{
+    private readonly NpgsqlConnection _dbConnection;
+
+    public SafeCustomersController(NpgsqlConnection dbConnection)
+    {
+        _dbConnection = dbConnection;
+    }
+
+    [HttpGet("{lastName}")]
+    public Customer Get(string lastName)
+    {
+        var query = @"SELECT id, 
+                             first_name as FirstName, 
+                             last_name as LastName 
+                       FROM customers 
+                       WHERE last_name=@lastName";
+
+        return _dbConnection.QueryFirstOrDefault<Customer>(query, new { lastName});
+    }
+}

2023-10-25-Internal-10SecurityVulnerabilities/src/SecurityVulnerabilities/Customers/Customer.cs

@@ -0,0 +1,30 @@
+using Dapper;
+using Microsoft.AspNetCore.Mvc;
+using Npgsql;
+using SecurityVulnerabilities.Controllers;
+
+namespace SecurityVulnerabilities.Customers;
+
+[ApiController]
+[Route("[controller]")]
+public class VulnerableCustomersController : ControllerBase
+{
+    private readonly NpgsqlConnection _dbConnection;
+
+    public VulnerableCustomersController(NpgsqlConnection dbConnection)
+    {
+        _dbConnection = dbConnection;
+    }
+
+    [HttpGet("{lastName}")]
+    public Customer Get(string lastName)
+    {
+        var query = $@"SELECT id, 
+                              first_name as FirstName, 
+                              last_name as LastName 
+                       FROM customers 
+                       WHERE last_name='{lastName}'";
+
+        return _dbConnection.QueryFirstOrDefault<Customer>(query);
+    }
+}

2023-10-25-Internal-10SecurityVulnerabilities/src/SecurityVulnerabilities/Customers/SafeCustomersController.cs

@@ -0,0 +1,7 @@
+namespace SecurityVulnerabilities.Documents;
+
+public class CreateFileRequest
+{
+    public string FilePath { get; set; }
+    public string FileContents { get; set; }
+}