add csrf

Author: tangxiaofeng7

Dockerfile

@@ -1,4 +1,4 @@
 FROM openjdk:8-jdk-alpine
 VOLUME /tmp
-COPY ./target/secexample-0.0.1-SNAPSHOT.jar app.jar
+COPY ./target/secexample-1.0.jar app.jar
 CMD ["java", "-jar", "/app.jar"]

README.md

@@ -14,6 +14,7 @@ https://github.com/tangxiaofeng7/SecExample
 | ---------------------- | ---- |
 | [SQLI]         | 🌟🌟  |
 | [XSS]             | 🌟    |
+| [CSRF]             | 🌟    |
 | [SSRF]            | 🌟🌟  |
 | [CORS]             | 🌟🌟    |
 | [RCE]             | 🌟🌟  |

images/index.png

@@ -6,11 +6,11 @@
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-starter-parent</artifactId>
         <version>2.5.0</version>
-        <relativePath/> <!-- lookup parent from repository -->
+        <relativePath/>
     </parent>
     <groupId>com.suyu</groupId>
     <artifactId>secexample</artifactId>
-    <version>0.0.1-SNAPSHOT</version>
+    <version>1.0</version>
     <name>SecExample</name>
     <description>Java开发的漏洞靶场</description>
     <properties>

pom.xml

@@ -1,2 +1,42 @@
-package com.suyu.secexample.csrf.controller;public class csrfcontroller {
+package com.suyu.secexample.csrf.controller;
+
+import com.alibaba.fastjson.JSON;
+import com.alibaba.fastjson.JSONObject;
+import com.suyu.secexample.csrf.model.User;
+import com.suyu.secexample.csrf.service.UsernameService;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+
+@Controller
+public class csrfcontroller {
+    User user = new User();
+    @Autowired
+    private UsernameService userService;
+
+    @GetMapping("/csrf")
+    public String input() {
+        return "csrf/csrf";
+    }
+
+        @RequestMapping("/csrf")
+    public String addUser(User user1, Model model) {
+        user.setId(user1.getId());
+        user.setName(user1.getName());
+        user.setPwd(user1.getPwd());
+        userService.addUser(user);
+        return "csrf/csrf";
+    }
+
 }
+
+
+
+
+
+
+
+

src/main/java/com/suyu/secexample/csrf/controller/csrfcontroller.java

@@ -8,6 +8,6 @@
 
 @Mapper
 @Repository
-public interface UserMapper {
-    public List<User> addUser(User user);
+public interface UsernameMapper {
+    public void addUser(User user);
 }

src/main/java/com/suyu/secexample/csrf/mapper/UsernameMapper.java

@@ -1,2 +1,14 @@
-package com.suyu.secexample.csrf.model;public class User {
+package com.suyu.secexample.csrf.model;
+
+import lombok.AllArgsConstructor;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@NoArgsConstructor
+@AllArgsConstructor
+public class User {
+    private int id;
+    private String name;
+    private String pwd;
 }

src/main/java/com/suyu/secexample/csrf/model/User.java

@@ -3,6 +3,6 @@
 import com.suyu.secexample.csrf.model.User;
 import java.util.List;
 
-public interface UserService {
-    public List<User> addUser(User user);
+public interface UsernameService {
+    public void addUser(User user);
 }

src/main/java/com/suyu/secexample/csrf/service/UsernameService.java

@@ -1,21 +1,20 @@
 package com.suyu.secexample.csrf.service.impl;
 
-
-import com.suyu.secexample.csrf.mapper.UserMapper;
+import com.suyu.secexample.csrf.mapper.UsernameMapper;
 import com.suyu.secexample.csrf.model.User;
-import com.suyu.secexample.csrf.service.UserService;
+import com.suyu.secexample.csrf.service.UsernameService;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.stereotype.Service;
 
 import java.util.List;
 
 @Service
-public class UserServiceImpl implements UserService {
+public class UsernameServiceImpl implements UsernameService {
     @Autowired
-    private UserMapper userMapper;
+    private UsernameMapper usernameMapper;
 
     @Override
-    public List<User> addUser(User user) {
-        return userMapper.addUser(user);
+    public void addUser(User user) {
+        usernameMapper.addUser(user);
     }
 }

src/main/java/com/suyu/secexample/csrf/service/impl/UsernameServiceImpl.java

@@ -13,14 +13,6 @@ public class fastjsoncontroller {
 
     @GetMapping("/fastjson")
     public String input(){
-//
-//        User user = new User();
-//        user.setAge("18");
-//        user.setUsername("txf");
-//        String ser1 = JSON.toJSONString(user);
-//        System.out.println(ser1);
-//        String ser2 = JSON.toJSONString(user, SerializerFeature.WriteClassName);
-//        System.out.println(ser2);
         return "fastjson/fastjson";
     }