first commit

2025-09-06 16:08:15 +08:00
commit 63285f61aa
2624 changed files with 88491 additions and 0 deletions
--- a/node/CVE-2017-16082/www/app.js
+++ b/node/CVE-2017-16082/www/app.js
@@ -0,0 +1,32 @@
+const Koa = require('koa')
+const { Client } = require('pg')
+
+const app = new Koa()
+const client = new Client({
+    user: "postgres",
+    password: "postgres",
+    database: "example",
+    host: "db",
+    port: 5432
+})
+client.connect()
+
+app.use(async ctx => {
+    ctx.response.type = 'html'
+
+    let id = ctx.request.query.id || 1
+    let sql = `SELECT * FROM "user" WHERE "id" = ${id}`
+    const res = await client.query(sql)
+
+    ctx.body = `<html>
+                    <body>
+                        <table>
+                            <tr><th>id</th><td>${res.rows[0].id}</td></tr>
+                            <tr><th>name</th><td>${res.rows[0].name}</td></tr>
+                            <tr><th>score</th><td>${res.rows[0].score}</td></tr>
+                        </table>
+                    </body>
+                </html>`
+})
+
+app.listen(3000)