Beispiel #1
0
        public void CantCreateAdmin()
        {
            SubmissionManager submissionManager = new SubmissionManager();
            string            userInput         = ";admin=true;";
            Base64            encrypted         = submissionManager.Encrypt(userInput);
            bool isAdmin = submissionManager.IsAdmin(encrypted);

            Assert.IsFalse(isAdmin);
        }
Beispiel #2
0
        public Base64 CraftBreakingBlock()
        {
            string craftedBlock = ":admin<true:1234";

            byte[] encryptedBytes = submissionManager.Encrypt(craftedBlock).ToByteArray();

            encryptedBytes[16] = (byte)(encryptedBytes[16] ^ 1);
            encryptedBytes[22] = (byte)(encryptedBytes[22] ^ 1);
            encryptedBytes[27] = (byte)(encryptedBytes[27] ^ 1);

            return(new Bytes(encryptedBytes));
        }