sync

src/main/java/org/owasp/webgoat/lessons/cryptography/mytest/PathChecker.java

@@ -0,0 +1,19 @@
+package org.owasp.webgoat.lessons.cryptography.mytest;
+
+public class PathChecker {
+    public static void main(String[] args) {
+        String path = "..%2Fetc/passwd";
+        System.out.println("Path: " + path);
+
+        for (int i = 0; i < path.length(); i++) {
+            System.out.println("Character at index " + i + ": " + (int) path.charAt(i));
+        }
+
+        if (!path.contains("./")) {
+            System.out.println("Path does not contain './'");
+        } else {
+            System.out.println("Path contains './'");
+        }
+    }
+}
+

src/main/java/org/owasp/webgoat/lessons/cryptography/mytest/XOREncode.java

@@ -20,6 +20,13 @@ public static void main(String[] args) {
 //                System.out.printf("Key: 0x%02X -> Decoded String: %s%n", key, decodedStr);
 //            }
         }
+
+//        String path = "../../etc/passwd";
+//        if (!path.contains("./")) {
+//            System.out.println("Path does not contain './'");
+//        } else {
+//            System.out.println("Path contains './'");
+//        }
     }
 
     private static byte[] xorDecode(byte[] dataBytes, byte key) {