{"action":"created","issue":{"url":"https://api.github.com/repos/bkimminich/juice-shop/issues/209","repository_url":"https://api.github.com/repos/bkimminich/juice-shop","labels_url":"https://api.github.com/repos/bkimminich/juice-shop/issues/209/labels{/name}","comments_url":"https://api.github.com/repos/bkimminich/juice-shop/issues/209/comments","events_url":"https://api.github.com/repos/bkimminich/juice-shop/issues/209/events","html_url":"https://github.com/bkimminich/juice-shop/issues/209","id":180384313,"number":209,"title":"Continue after server crash","user":{"login":"bkimminich","id":3531020,"avatar_url":"https://avatars.githubusercontent.com/u/3531020?v=3","gravatar_id":"","url":"https://api.github.com/users/bkimminich","html_url":"https://github.com/bkimminich","followers_url":"https://api.github.com/users/bkimminich/followers","following_url":"https://api.github.com/users/bkimminich/following{/other_user}","gists_url":"https://api.github.com/users/bkimminich/gists{/gist_id}","starred_url":"https://api.github.com/users/bkimminich/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bkimminich/subscriptions","organizations_url":"https://api.github.com/users/bkimminich/orgs","repos_url":"https://api.github.com/users/bkimminich/repos","events_url":"https://api.github.com/users/bkimminich/events{/privacy}","received_events_url":"https://api.github.com/users/bkimminich/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/bkimminich/juice-shop/labels/0%20-%20Backlog","name":"0 - Backlog","color":"CCCCCC"},{"url":"https://api.github.com/repos/bkimminich/juice-shop/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2016-09-30T19:31:07Z","updated_at":"2016-10-01T01:20:04Z","closed_at":null,"body":"_As a_ hacker with a short fuse\n_I want_ the Juice Shop to save my challenge progress\n_so that_ I'm not frustrated when crashing the server.\n\nReasoning: Some attacks such as SQLI or weird JSON payloads can actually kill the nodejs server. The same goes for massive overload by automatic attack modes of pentesting tools.\n\nProblem: Today the challenges are reset together with the entire DB on server launch. So all progress is gone.\n\nIdea: Introduce either a \"continue code\" (like in Nintendo GameBoy classic times) or an automated backup of the DB after each challenge is solved. The code is somewhat retro-cool and corruption-safe, the DB copy might be corrupted but is more convenient. Would offer option to restore on Score Board. Continue code I could just store on disk on completion of a challenge and display with push notification and on score board. Might be some crazy hash of the DB ids of the challenges. Plus over DB backup: Would also work for containerized environment, where DB backups would die together with a crashed container.\n\n"},"comment":{"url":"https://api.github.com/repos/bkimminich/juice-shop/issues/comments/250883940","html_url":"https://github.com/bkimminich/juice-shop/issues/209#issuecomment-250883940","issue_url":"https://api.github.com/repos/bkimminich/juice-shop/issues/209","id":250883940,"user":{"login":"bkimminich","id":3531020,"avatar_url":"https://avatars.githubusercontent.com/u/3531020?v=3","gravatar_id":"","url":"https://api.github.com/users/bkimminich","html_url":"https://github.com/bkimminich","followers_url":"https://api.github.com/users/bkimminich/followers","following_url":"https://api.github.com/users/bkimminich/following{/other_user}","gists_url":"https://api.github.com/users/bkimminich/gists{/gist_id}","starred_url":"https://api.github.com/users/bkimminich/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bkimminich/subscriptions","organizations_url":"https://api.github.com/users/bkimminich/orgs","repos_url":"https://api.github.com/users/bkimminich/repos","events_url":"https://api.github.com/users/bkimminich/events{/privacy}","received_events_url":"https://api.github.com/users/bkimminich/received_events","type":"User","site_admin":false},"created_at":"2016-10-01T01:20:04Z","updated_at":"2016-10-01T01:20:04Z","body":"@braimee Could you please check if your crash from `sqlmap` looks similar to #155? If so, please append your logs there and I'll reopen that problem... but, I don't see much hope to make a node.js app such as Juice Shop resistent against massive scripted attacks easily.\r\n\r\nMaybe https://github.com/rook2pawn/node-ddos would be worth a try?"}}
{"actor":{"display_login":"bkimminich"}}