Create scripts to validade if an app is still vulnerable to the attack narrative

owasp-top10-2017-apps/a1/sstype/Makefile

@@ -36,3 +36,8 @@ help:
 	} \
 	{ lastLine = $$0 }' $(MAKEFILE_LIST) | sort
 	printf "\n"
+
+## Validate if app is vulnerable to the attack narrative
+check-sec:
+	chmod +x deployments/check-sec.sh
+	./deployments/check-sec.sh

owasp-top10-2017-apps/a1/sstype/deployments/check-sec.sh

@@ -0,0 +1,19 @@
+#!/bin/bash
+#
+# This script verifies if app is vulnerable to the attack narrative
+#
+
+echo "secDevLabs: Exploiting your app locally!"
+echo "Server-Side Template Injection"
+
+echo
+
+echo "Response:"
+
+filteredResponse=$(curl -s --request GET "http://localhost:10001/?name=\{\{4*4\}\}" | grep "Hello: 16");
+
+if [ "$filteredResponse" != "" ]; then
+    echo "The app is vulnerable.";
+else
+    echo "Congrats! The app could not be exploited!";
+fi

owasp-top10-2017-apps/a4/vinijr-blog/Makefile

@@ -37,3 +37,8 @@ help:
 	} \
 	{ lastLine = $$0 }' $(MAKEFILE_LIST) | sort
 	printf "\n"
+
+## Validate if app is vulnerable to the attack narrative
+check-sec:
+	chmod +x deployments/check-sec.sh
+	./deployments/check-sec.sh

owasp-top10-2017-apps/a4/vinijr-blog/deployments/check-sec.sh

@@ -0,0 +1,19 @@
+#!/bin/bash
+#
+# This script verifies if app is vulnerable to the attack narrative
+#
+
+echo "secDevLabs: Exploiting your app locally!"
+echo "XXE to retrieve sensitive information"
+
+echo
+
+echo "Response:"
+
+response=$(curl -s -d @deployments/evilxml.xml localhost:10004/contact.php ; echo);
+
+if [ "$(echo $response | grep 'root:x:0:0:root:/root:/bin/bash')" != "" ]; then
+    echo "The app is vulnerable.";
+else
+    echo "Congrats! The app could not be exploited!";
+fi

owasp-top10-2017-apps/a4/vinijr-blog/deployments/evilxml.xml

@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="ISO-8859-1"?>
+<!DOCTYPE root [
+<!ENTITY xxe SYSTEM "file:///etc/passwd">
+]>
+<contact>
+<name>&xxe;</name>
+<email>[email protected]</email>
+<subject>YOU ROCK</subject>
+<message>I LOVE WATCHING YOUR SKILLS, MAN</message>
+</contact>