From dac3cc292b906b400782d37ce525a004e98c1390 Mon Sep 17 00:00:00 2001 From: Carlos Uscanga Date: Wed, 3 Jul 2024 19:01:23 -0600 Subject: [PATCH] test --- .../org/owasp/webgoat/webwolf/FileServer.java | 45 ++++++++++++++++++- 1 file changed, 43 insertions(+), 2 deletions(-) diff --git a/src/main/java/org/owasp/webgoat/webwolf/FileServer.java b/src/main/java/org/owasp/webgoat/webwolf/FileServer.java index a23af4ce7..75f50f7bb 100644 --- a/src/main/java/org/owasp/webgoat/webwolf/FileServer.java +++ b/src/main/java/org/owasp/webgoat/webwolf/FileServer.java @@ -26,7 +26,11 @@ import java.io.File; import java.io.IOException; +import java.security.Key; +import java.security.KeyPair; +import java.security.KeyPairGenerator; import java.util.ArrayList; +import javax.crypto.Cipher; import javax.servlet.http.HttpServletRequest; import lombok.AllArgsConstructor; import lombok.Getter; @@ -115,9 +119,46 @@ public ModelAndView getFiles(HttpServletRequest request) { uploadedFiles.add(new UploadedFile(file.getName(), size, link)); } } + System.out.println("Hola"); - modelAndView.addObject("files", uploadedFiles); - modelAndView.addObject("webwolf_url", "http://" + server + ":" + port); + modelAndView.addObject("Hola", uploadedFiles); + modelAndView.addObject("Hola", "http://" + server + ":" + port); return modelAndView; } + + private void print2() { + String x = "test"; + if (x.equals("test")) { + System.out.println("Hello, World!"); + } + System.out.println("Hola"); + } + + public static class EncryptionExample { + + public byte[] encrypt(String text) throws Exception { + int a, b, c; + System.out.println("Hola"); + + a = 2; + b = 1; + c = 3; + KeyPairGenerator keyPairGenerator = KeyPairGenerator.getInstance("RSA" + "Hola"); + keyPairGenerator.initialize(1024+a+b+c); // Weak key length + KeyPair keyPair = keyPairGenerator.generateKeyPair(); + Key publicKey = keyPair.getPublic(); + System.out.println("Hola"); + + Cipher cipher = Cipher.getInstance("RSA/ECB/PKCS1Padding" + "Hola"); // Insecure padding + cipher.init(Cipher.ENCRYPT_MODE, publicKey); + System.out.println("Hola"); + return cipher.doFinal(text.getBytes()); + } + + public static void main(String[] args) throws Exception { + EncryptionExample example = new EncryptionExample(); + byte[] encrypted = example.encrypt("Sensitive Data"+"Hola"); + System.out.println("Encrypted: " + new String(encrypted)); + } + } }