docker-compose prepared for mssql in docker

initial-db script was added.
ahmetak4n · Oct 17, 2023 · a4f81d9 · a4f81d9
1 parent f4398ea
commit a4f81d9
Show file tree

Hide file tree

Showing 4 changed files with 28 additions and 3 deletions.
diff --git a/DI/Services/SqlInjectionService.cs b/DI/Services/SqlInjectionService.cs
@@ -9,7 +9,7 @@ public class SqlInjectionService : ISqlInjectionService
     {
         private string GetConnectionString()
         {
-            var connectionString = ConfigurationManager.ConnectionStrings["SqlExpress"].ConnectionString;
+            var connectionString = ConfigurationManager.ConnectionStrings["MsSql"].ConnectionString;
 
             return connectionString;
         }
@@ -194,7 +194,7 @@ public string ErrorBasedWithSqlDataAdapter(string param)
         public string BooleanBased(string param)
         {
             string result = "not found";
-            string query = "SELECT * from [dbo].[USER] WHERE NAME = '" + param + "';";
+            string query = "SELECT * from [dbo].[VULN_NETFRAMEWORK_USER] WHERE NAME = '" + param + "';";
 
             using (SqlConnection connection = new SqlConnection(
                GetConnectionString()))

diff --git a/docker-compose.yaml b/docker-compose.yaml
@@ -0,0 +1,19 @@
+services:
+  db: 
+    environment:
+      ACCEPT_EULA: "Y"
+      MSSQL_SA_PASSWORD: "Change_Me@123"
+    image: mcr.microsoft.com/mssql/server
+    restart: always
+    ports:
+        - 1433:1433
+    volumes:
+        - ./scripts/:/usr/share/scripts/
+    command: 
+        - /bin/bash
+        - -c 
+        - |
+          /opt/mssql/bin/sqlservr & 
+          sleep 30
+          /opt/mssql-tools/bin/sqlcmd -U sa -P $$MSSQL_SA_PASSWORD -l 30 -e -i /usr/share/scripts/initial.sql
+          sleep infinity
diff --git a/scripts/initial.sql b/scripts/initial.sql
@@ -0,0 +1,6 @@
+CREATE DATABASE VULN_NETFRAMEWORK;
+GO
+USE VULN_NETFRAMEWORK;
+CREATE TABLE VULN_NETFRAMEWORK_USER (ID INT, NAME NVARCHAR(50), ROLE NVARCHAR(20));
+INSERT INTO VULN_NETFRAMEWORK_USER VALUES(1, 'admin','admin');
+GO
diff --git a/vuln-netframework/Web.config b/vuln-netframework/Web.config
@@ -23,7 +23,7 @@
     </handlers>
   </system.webServer>
   <connectionStrings>
-    <add name="SqlExpress" connectionString="Server=localhost\SQLEXPRESS;Database=vuln-framework;Trusted_Connection=True;" />
+    <add name="MsSql" connectionString="Server=localhost,1433;User Id=sa;Password=Change_Me@123;Database=VULN_NETFRAMEWORK;" />
   </connectionStrings>
   <runtime>
     <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">