diff --git a/js_login/Dockerfile b/js_login/Dockerfile new file mode 100644 index 0000000..675fb62 --- /dev/null +++ b/js_login/Dockerfile @@ -0,0 +1,8 @@ +FROM python:3.12 + +COPY src/ /web + +COPY docker/start.sh /start.sh +RUN chmod +x start.sh + +ENTRYPOINT ["/start.sh"] \ No newline at end of file diff --git a/js_login/README.md b/js_login/README.md index aead83c..0faf8a7 100644 --- a/js_login/README.md +++ b/js_login/README.md @@ -1,3 +1,8 @@ # JsLogin -Taken from: https://github.com/mazipan/login-page-css/tree/master/src/18-instagram \ No newline at end of file +Taken from: https://github.com/mazipan/login-page-css/tree/master/src/18-instagram + +## Run the image +```bash +docker run --rm --name unsafe_login --env FLAG='FLAG{JSLOGIN}' -p 3570:8080 -it pierre42100/unsafe-js-login +``` \ No newline at end of file diff --git a/js_login/build.sh b/js_login/build.sh new file mode 100644 index 0000000..df3e3c9 --- /dev/null +++ b/js_login/build.sh @@ -0,0 +1 @@ +sudo docker build -t pierre42100/unsafe-js-login . \ No newline at end of file diff --git a/js_login/docker/start.sh b/js_login/docker/start.sh new file mode 100644 index 0000000..73bdcdd --- /dev/null +++ b/js_login/docker/start.sh @@ -0,0 +1,13 @@ +#!/bin/sh + +if [[ -z "${FLAG}" ]]; then + echo "Please set the FLAG environment variable!" + exit 1 +fi + +echo $FLAG > /web/flag.txt + +echo "Starting HTTP server..." + +cd /web +python3 -m http.server 8080 \ No newline at end of file diff --git a/js_login/src/script.js b/js_login/src/script.js index 89f9f3f..d6bdd35 100644 --- a/js_login/src/script.js +++ b/js_login/src/script.js @@ -8,5 +8,5 @@ form.addEventListener("submit", (e) => { if (email === "sesame@ouvretoi.com" && password === "topsecret") location.href = "/flag.txt"; else - alert("Identifiants incorrects, veuillez réessayer !"); + alert("Invalid credentials, please try again!"); }) \ No newline at end of file