bipin819/foundation-task1 repository overview

⁠Foundation of Computer Science - Security Demonstration

ST4015CMD | Softwarica College of IT & E-Commerce Student: Bipin Lamsal | Student ID: 250510

---

⁠What this image does

This Docker image demonstrates the difference between vulnerable and defended server implementations against SQL injection attacks, and shows how JWT tokens work using Base64 encoding.

---

⁠How to run

⁠Pull the image

docker pull bipin819/foundation-task1:latest

⁠Run SQL injection demonstration

docker run bipin819/foundation-task1:latest

⁠Run JWT security demonstration

docker run bipin819/foundation-task1:latest python3 jwt_demo.py

⁠Run automated security tests

docker run bipin819/foundation-task1:latest python3 test_security.py

---

⁠What is included

• attack_runner.py — SQL injection attack demonstration
• vulnerable_server.py — Unprotected server simulation
• defended_server.py — Parameterized query defence
• jwt_demo.py — JWT and Base64 security demonstration
• test_security.py — Automated security tests

---

⁠Key findings

• Base64 encoding provides zero protection against SQL injection
• Parameterized queries block 100% of injection attempts
• JWT payloads are fully readable without any key