+
+Lesson Plan Title: Using an Access Control Matrix
+Concept / Topic To Teach:
+ +In role-based access control scheme, a role represents a set of access permissions and privileges. A user can be assigned one or more roles. A role-based access control normally consists of two parts: role permission management and role assignment. A broken role-based access control scheme might allow a user to perform accesses that are not allowed by his/her assigned roles, or somehow obtain unauthorized roles. +General Goal(s):
+Each user is a member of a role that is allowed to access only certain resources. Your goal is to explore the access control rules that govern this site. Only the [Admin] group should have access to the 'Account Manager' resource. + diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/BasicAuthentication.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/BasicAuthentication.html new file mode 100644 index 000000000..a656eefb5 --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/BasicAuthentication.html @@ -0,0 +1,9 @@ +
+
+Lesson Plan Title: Basic Authentication
+Concept / Topic To Teach:
+ +Basic Authentication is used to protect server side resources. The web server will send a 401 authentication request with the response for the requested resource. The client side browser will then prompt the user for a user name and password using a browser supplied dialog box. The browser will base64 encode the user name and password and sendthose credentials back to the web server. The web server will then validate the credentials and return the requested resource if the credentials are correct. These credentials are automatically resent for each page protected with this mechanism without requiring the user to enter their credentials again.+
General Goal(s):
+For this lesson, your goal is to understand Basic Authentication and answer the questions below. + diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/BlindSqlInjection.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/BlindSqlInjection.html new file mode 100644 index 000000000..8284e4dbc --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/BlindSqlInjection.html @@ -0,0 +1,15 @@ +
+
+
+Lesson Plan Title: How to Perform Blind SQL Injection
+Concept / Topic To Teach:
+ +SQL injection attacks represent a serious threat to any database-driven site. The methods behind an attack are easy to learn and the damage caused can range from considerable to complete system compromise. Despite these risks an incredible number of systems on the internet are susceptible to this form of attack. ++Not only is it a threat easily instigated, it is also a threat that, with a little common-sense and forethought, can be almost totally prevented. This lesson will show the student several examples of SQL injection.
+
+It is always good practice to sanitize all input data, especially data that will used in OS command, scripts, and database queiries.
+ + +
General Goal(s):
+The form below allows a user to enter an account number and determine if it is valid or not. Use this form to develop a true / false test check other entries in the database.Reference Ascii Values: 'A' = 65 'Z' = 90 'a' = 97 'z' = 122
The goal is to find the value of the first_name in table user_data for userid 15613. Put that name in the form to pass the lesson. \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/BufferOverflow.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/BufferOverflow.html new file mode 100644 index 000000000..b25b4f944 --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/BufferOverflow.html @@ -0,0 +1,9 @@ +
+
+
+Lesson Plan Title: How to Exploit Buffer Overflows
+Concept / Topic To Teach:
+How to Exploit Buffer Overflows. +General Goal(s):
+This lesson needs a creator! + \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/ChallengeScreen.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/ChallengeScreen.html new file mode 100644 index 000000000..b3d9b3321 --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/ChallengeScreen.html @@ -0,0 +1,7 @@ +
+
Lesson Plan Title: Putting it all together
++
Concept / Topic To Teach:
+This lesson creates a challenge that will help the student apply all that they have learned.+General Goal(s):
+Display the secret message. \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/CommandInjection.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/CommandInjection.html new file mode 100644 index 000000000..5fbbb2d58 --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/CommandInjection.html @@ -0,0 +1,11 @@ +
+
+Lesson Plan Title: How to Perform Command Injection
+Concept / Topic To Teach:
+ +Command injection attacks represent a serious threat to any parameter-driven site. The methods behind an attack are easy to learn and the damage caused can range from considerable to complete system compromise. Despite these risks an incredible number of systems on the internet are susceptible to this form of attack.+Not only is it a threat easily instigated, it is also a threat that, with a little common-sense and forethought, can be almost totally prevented. This lesson will show the student several examples of parameter injection.
+It is always good practice to sanitize all input data, especially data that will used in OS command, scripts, and database queries.
+ +
General Goal(s):
+The user should be able to execute any command on the hosting OS. \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/CrossSiteScripting.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/CrossSiteScripting.html new file mode 100644 index 000000000..760f2eb93 --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/CrossSiteScripting.html @@ -0,0 +1,11 @@ +
+
+Lesson Plan Title: How to Perform Cross Site Scripting (XSS)
+Concept / Topic To Teach:
+ +It is always a good practice to scrub all inputs, especially those inputs that will later be used as parameters to OS commands, scripts, and database queries. It is particularly important for content that will be permanently stored somewhere. Users should not be able to create message content that could cause another user to load an undesireable page or undesireable content when the user's message is retrieved.+XSS can also occur when unvalidated user input is used in an HTTP response. In a reflected XSS attack, an attacker can craft a URL with the attack script and post it to another website, email it, or otherwise get a victim to click on it. + +
General Goal(s):
+For this exercise, you will perform stored and reflected XSS attacks. You will also implement code changes in the web application to defeat these attacks. +diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/DOS_Login.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/DOS_Login.html new file mode 100644 index 000000000..941a89b49 --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/DOS_Login.html @@ -0,0 +1,9 @@ +
+
+Lesson Plan Title: Denial of Service from Multiple Logins
+Concept / Topic To Teach:
+ +Denial of service attacks are a major issue in web applications. If the end user cannot conduct business or perform the service offered by the web application, then both time and money is wasted. +General Goal(s):
+This site allows a user to login multiple times. This site has a database connection pool that allows 2 connections. You must obtain a list of valid users and create a total of 3 logins. + \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/Encoding.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/Encoding.html new file mode 100644 index 000000000..fcba2ddac --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/Encoding.html @@ -0,0 +1,9 @@ +
+
+Lesson Plan Title: How to Peform Basic Encoding
+Concept / Topic To Teach:
+ +Different encoding schemes can be used in web applications for different reasons. + +General Goal(s):
+This lesson will familiarize the user with different encoding schemes. \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/FailOpenAuthentication.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/FailOpenAuthentication.html new file mode 100644 index 000000000..27a82e2cf --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/FailOpenAuthentication.html @@ -0,0 +1,10 @@ +
+
+
+Lesson Plan Title: How to Bypass Fail Open Authentication
+Concept / Topic To Teach:
+ + This lesson presents the basics for understanding the "fail open" condition regarding authentication. The security term, “fail open” describes a behavior of a verification mechanism. This is when an error (i.e. unexpected exception) occurs during a verification method causing that method to evaluate to true. This is especially dangerous during login.+ +
General Goal(s):
+ The user should be able to bypass the authentication check. \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/ForcedBrowsing.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/ForcedBrowsing.html new file mode 100644 index 000000000..134656b75 --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/ForcedBrowsing.html @@ -0,0 +1,9 @@ +
+
+
+Lesson Plan Title: How to Exploit Forced Browsing
+Concept / Topic To Teach:
+How to Exploit Forced Browsing +General Goal(s):
+This lesson needs a creator! + \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/ForgotPassword.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/ForgotPassword.html new file mode 100644 index 000000000..2e47124e2 --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/ForgotPassword.html @@ -0,0 +1,9 @@ +
+
+Lesson Plan Title: How to Exploit the Forgot Password Page
+Concept / Topic To Teach:
+ +Web applications frequently provide their users the ability to retrieve a forgotten password. Unfortunately, most web applications fail to implement the mechanism properly. The information required to verify the integrity of the user is often overly simplistic. +General Goal(s):
+Users can retrieve their password if they can answer the secret question properly. There is no lock-out mechanism on this 'Forgot Password' page. Your username is 'webgoat' and your favorite color is 'red'. The goal is to retrieve the password of another user. + \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/HiddenFieldTampering.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/HiddenFieldTampering.html new file mode 100644 index 000000000..630712226 --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/HiddenFieldTampering.html @@ -0,0 +1,9 @@ +
+
+Lesson Plan Title: How to Exploit Hidden Fields
+Concept / Topic To Teach:
+ +Developers will use hidden fields for tracking, login, pricing, etc.. information on a loaded page. While this is a convienent and easy mechanism for the developer, they often don't validate the information that is received from the hidden field. This lesson will teach the attacker to find and modify hidden fields to obtain a product for a price other than the price specified+ +
General Goal(s):
+The user should be able to exploit a hidden field to obtain a product at an incorrect price. \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/HtmlClues.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/HtmlClues.html new file mode 100644 index 000000000..4e1c619c9 --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/HtmlClues.html @@ -0,0 +1,11 @@ +
+
+
+Lesson Plan Title: How to Discover Clues in the HTML
+Concept / Topic To Teach:
+ + Developers are notorious for leaving statements like FIXME's, Code Broken, Hack, etc... inside the source code. Review the source code for any comments denoting passowrds, backdoors, or something doesn't work right. + ++
General Goal(s):
+ The user should be able to bypass the authentication check. \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/HttpBasics.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/HttpBasics.html new file mode 100644 index 000000000..9e9bad245 --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/HttpBasics.html @@ -0,0 +1,27 @@ +
+
+
+Lesson Plan Title: Http Basics
+Concept / Topic To Teach:
+ This lesson presents the basics for understanding the transfer of data between the browser and the web application.+
+
+
+ The client contacts the server and sends a document request
+
+ +How HTTP works: +
+All HTTP transactions follow the same general format. Each client request and server response has three parts: the request or response line, a header section, and the entity body. The client initiates a transaction as follows:+
+ The client contacts the server and sends a document request
+
+
- GET /index.html?param=value HTTP/1.0
+
+
- User-Agent: Mozilla/4.06 Accept: image/gif,image/jpeg, */*
+
General Goal(s):
+ +Enter your name in the input field below and press "go" to submit. The server will accept the request, reverse the input, and display it back to the user, illustrating the basics of handling an HTTP request. ++The user should become familiar with the features of WebGoat by manipulating the above +buttons to view hints, show the HTTP request parameters, the HTTP request cookies, and the Java source code. + \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/HttpOnly.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/HttpOnly.html new file mode 100644 index 000000000..7de425f79 --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/HttpOnly.html @@ -0,0 +1,9 @@ +
+
+Lesson Plan Title: HttpOnly Test
+Concept / Topic To Teach:
+ +To help mitigate the cross site scripting threat, Microsoft has introduced a new cookie attribute entitled 'HttpOnly.' If this flag is set, then the browser should not allow client-side script to access the cookie. Since the attribute is relatively new, several browsers neglect to handle the new attribute properly. +General Goal(s):
+The purpose of this lesson is to test whether your browser supports the HTTPOnly cookie flag. Note the value of the unique2u cookie. If your browser supports HTTPOnly, and you enable it for a cookie, client side code should NOT be able to read OR write to that cookie, but the browser can still send its value to the server. Some browsers only prevent client side read access, but don't prevent write access. + \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/JavaScriptValidation.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/JavaScriptValidation.html new file mode 100644 index 000000000..738575cc8 --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/JavaScriptValidation.html @@ -0,0 +1,10 @@ +
+
+Lesson Plan Title: How to Bypass Client Side JavaScript Validation
+Concept / Topic To Teach:
+ +Client-side validation should not be considered a secure means of validating parameters. These validation only help reduce the amount of server processing time for normal users who do not know the format of required input. Attackers can bypass these mechanisms easily in various ways. Any client-side validation should be duplicated on the server side. This will greatly reduce the likelyhood of insecure parameter values being used in the application. + ++
General Goal(s):
+For this exercise, the web site requires that you follow certain rules when you fill out a form. The user should be able to break those rules, and send the website input that it wasn't expecting.\ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/Lesson_Plan_Template.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/Lesson_Plan_Template.html new file mode 100644 index 000000000..66293a95c --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/Lesson_Plan_Template.html @@ -0,0 +1,17 @@ +
+
+
+Lesson Plan Title:
+Concept / Topic To Teach:
+Standards Addressed:
+General Goal(s):
+Specific Objectives:
+Required Materials:
+Anticipatory Set (Lead-In):
+Step-By-Step Procedures:
+Plan For Independent Practice:
+Closure (Reflect Anticipatory Set):
+Assessment Based On Objectives:
+Extensions (For Gifted Students):
+Possible Connections To Other Subjects:
+ \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/ParameterInjection.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/ParameterInjection.html new file mode 100644 index 000000000..e26ee947e --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/ParameterInjection.html @@ -0,0 +1,16 @@ +
+
+
+Lesson Plan Title: How to Perform Parameter Injection
+Concept / Topic To Teach:
+ +Parameter injection attacks represent a serious threat to any parameter-driven site. The methods behind an attack are easy to learn and the damage caused can range from considerable to complete system compromise. Despite these risks an incredible number of systems on the internet are susceptible to this form of attack.+
+ Not only is it a threat easily instigated, it is also a threat that, with a little common-sense and forethought, can be almost totally prevented. This lesson will show the student several examples of parameter injection.
+
+ It is always good practice to sanitize all input data, especially data that will used in OS command, scripts, and database queries.
+ +
+ +
General Goal(s):
+ The user should be able to execute any command on the hosting OS. \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/PathBasedAccessControl.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/PathBasedAccessControl.html new file mode 100644 index 000000000..235bd2528 --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/PathBasedAccessControl.html @@ -0,0 +1,9 @@ +
+
+Lesson Plan Title: How to Bypass a Path Based Access Control Scheme
+Concept / Topic To Teach:
+ +In a path based access control scheme, an attacker can traverse a path by providing relative path information. Therefore an attacker can use relative paths to access files that normally are not directly accessible by anyone, or would otherwise be denied if requested directly. + +General Goal(s):
+The user should be able to access a file that is not in the listed directory. \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/ReflectedXSS.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/ReflectedXSS.html new file mode 100644 index 000000000..745d3aa6d --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/ReflectedXSS.html @@ -0,0 +1,9 @@ +
+
+Lesson Plan Title: How to Perform Reflected Cross Site Scripting (XSS)
+Concept / Topic To Teach:
+ +It is always a good practice to validate all input on the server side. XSS can occur when unvalidated user input is used in an HTTP response. In a reflected XSS attack, an attacker can craft a URL with the attack script and post it to another website, email it, or otherwise get a victim to click on it. + +General Goal(s):
+For this exercise, your mission is to come up with some input containing a script. You have to try to get this page to reflect that input back to your browser, which will execute the script and do something bad. \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/RemoteAdminFlaw.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/RemoteAdminFlaw.html new file mode 100644 index 000000000..207248adf --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/RemoteAdminFlaw.html @@ -0,0 +1,11 @@ +
+
+Lesson Plan Title: How to Force Browser Web Resources
+Concept / Topic To Teach:
+Applications will often have an adminstrative interface that allows privileged users access to functionality that normal users shouldn't see. The application server will often have an admin interface as well. +Standards Addressed:
+General Goal(s): + +Try to access the administrative interface for WebGoat. You may also try to access the administrative interface for Tomcat. The Tomcat admin interface can be accessed via a URL (/admin) and will not count towards the completion of this lesson. + +
\ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/RoleBasedAccessControl.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/RoleBasedAccessControl.html new file mode 100644 index 000000000..132dc235f --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/RoleBasedAccessControl.html @@ -0,0 +1,15 @@ +
+
+Lesson Plan Title: Role Based Access Control
+Concept / Topic To Teach:
+ +In role-based access control scheme, a role represents a set of access permissions and privileges. A user can be assigned one or more roles. A role-based access control normally consists of two parts: role permission management and role assignment. A broken role-based access control scheme might allow a user to perform accesses that are not allowed by his/her assigned roles, or somehow obtain unauthorized roles. + +General Goal(s):
+Your goal is to explore the access control rules that govern this site. Each role has permission to certain resources (A-F). Each user is assigned one or more roles. Only the user with the [Admin] role should have access to the 'F' resources. In a successful attack, a user doesn't have the [Admin] role can access resource F. +Lesson Resources:
+Org Chart ++Access Control Matrix +
+Database Schema diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/SoapRequest.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/SoapRequest.html new file mode 100644 index 000000000..4daca7fda --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/SoapRequest.html @@ -0,0 +1,9 @@ +
+
+Lesson Plan Title: How to Create a SOAP Request
+Concept / Topic To Teach:
+ +Web Services communicate through the use of SOAP requests. These requests are submitted to a web service in an attempt to execute a function listed in the web service definition language (WSDL). Lets learn something about WSDL files. Check out WebGoats web service description language (WSDL) file. +General Goal(s):
+Try connecting to the WSDL with a browser or Web Service tool. The URL for the web service is: http://localhost/WebGoat/services/SoapRequest The WSDL can usually be viewed by adding a ?WSDL on the end of the web service request. + \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/SqlNumericInjection.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/SqlNumericInjection.html new file mode 100644 index 000000000..6aae8f89d --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/SqlNumericInjection.html @@ -0,0 +1,14 @@ +
+
+
+Lesson Plan Title: How to Perform Numeric SQL Injection
+Concept / Topic To Teach:
+ +SQL injection attacks represent a serious threat to any database-driven site. The methods behind an attack are easy to learn and the damage caused can range from considerable to complete system compromise. Despite these risks an incredible number of systems on the internet are susceptible to this form of attack. ++Not only is it a threat easily instigated, it is also a threat that, with a little common-sense and forethought, can be almost totally prevented. This lesson will show the student several examples of SQL injection.
+
+It is always good practice to sanitize all input data, especially data that will used in OS command, scripts, and database queiries.
+
General Goal(s):
+The form below allows a user to view weather data. Try to inject an SQL string that results in all the weather data being displayed. + \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/SqlStringInjection.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/SqlStringInjection.html new file mode 100644 index 000000000..8c8f9e5b6 --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/SqlStringInjection.html @@ -0,0 +1,14 @@ +
+
+
+Lesson Plan Title: How to Perform String SQL Injection
+Concept / Topic To Teach:
+ +SQL injection attacks represent a serious threat to any database-driven site. The methods behind an attack are easy to learn and the damage caused can range from considerable to complete system compromise. Despite these risks an incredible number of systems on the internet are susceptible to this form of attack. ++Not only is it a threat easily instigated, it is also a threat that, with a little common-sense and forethought, can be almost totally prevented. This lesson will show the student several examples of SQL injection.
+
+It is always good practice to sanitize all input data, especially data that will used in OS command, scripts, and database queiries.
+
General Goal(s):
+The form below allows a user to view their credit card numbers. Try to inject an SQL string that results in all the credit card numbers being displayed. Try the user name of 'Smith'. + \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/StoredXss.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/StoredXss.html new file mode 100644 index 000000000..4160adcfd --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/StoredXss.html @@ -0,0 +1,9 @@ +
+
+Lesson Plan Title: How to Perform Stored Cross Site Scripting (XSS)
+Concept / Topic To Teach:
+ +It is always a good practice to scrub all inputs, especially those inputs that will later be used as parameters to OS commands, scripts, and database queries. It is particularly important for content that will be permanently stored somewhere. Users should not be able to create message content that could cause another user to load an undesireable page or undesireable content when the user's message is retrieved. + +General Goal(s):
+The user should be able to add message content that cause another user to load an undesireable page or content. \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/ThreadSafetyProblem.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/ThreadSafetyProblem.html new file mode 100644 index 000000000..1b01a915d --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/ThreadSafetyProblem.html @@ -0,0 +1,22 @@ + + + + + +
+
+
+Lesson Plan Title: How to Exploit Thread Safety Problems
+Concept / Topic To Teach:
+ + Web applications can handle many HTTP requests simultaneously. Developers often use variables that are not thread safe. Thread safety means that the fields of an object or class always maintain a valid state when used concurrently by multiple threads. It is often possible to exploit a concurrency bug by loading the same page as another user at the exact same time. Because all threads share the same method area, and the method area is where all class variables are stored, multiple threads can attempt to use the same class variables concurrently.+ +
General Goal(s):
+The user should be able to exploit the concurrency error in the web application and view login information for another user that is attempting the same function at the same time. This will require the use of two browsers. ++ + diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/TraceXSS.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/TraceXSS.html new file mode 100644 index 000000000..c1aaed9d3 --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/TraceXSS.html @@ -0,0 +1,9 @@ +
+
+Lesson Plan Title: How to Perform Cross Site Trace Attacks
+Concept / Topic To Teach:
+ +It is always a good practice to scrub all inputs, especially those inputs that will later be used as parameters to OS commands, scripts, and database queries. It is particularly important for content that will be permanently stored somewhere. Users should not be able to create message content that could cause another user to load an undesireable page or undesireable content when the user's message is retrieved. +General Goal(s):
+Tomcat is configured to support the HTTP TRACE command. Your goal is to perform a Cross Site Trace (XST) attack. + \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/UncheckedEmail.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/UncheckedEmail.html new file mode 100644 index 000000000..2cd2e82db --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/UncheckedEmail.html @@ -0,0 +1,9 @@ +
+
+Lesson Plan Title: How to Exploit Unchecked Email
+Concept / Topic To Teach:
+ +It is always a good practice to validate all inputs. Most sites allow a non-authenticated users to send email to a 'friend'. This is a great mechanisms for spammers to send out email using your corporate mail server. + +General Goal(s):
+The user should be able to send and obnoxious email message. \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/WSDLScanning.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/WSDLScanning.html new file mode 100644 index 000000000..df11d5a65 --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/WSDLScanning.html @@ -0,0 +1,9 @@ +
+
+Lesson Plan Title: How to Perform WSDL Scanning
+Concept / Topic To Teach:
+ +Web Services communicate through the use of SOAP requests. These requests are submitted to a web service in an attempt to execute a function listed in the web service definition language (WSDL). +General Goal(s):
+This screen is the API for a web service. Check the WSDL for this web service and try to get some customer credit numbers. + \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/WeakAuthenticationCookie.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/WeakAuthenticationCookie.html new file mode 100644 index 000000000..1787686c4 --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/WeakAuthenticationCookie.html @@ -0,0 +1,10 @@ +
+
+
+Lesson Plan Title: How to Spoof an Authentication Cookie
+Concept / Topic To Teach:
+ +Many applications will automatically log a user into their site if the right authentication cookie is specified. Some times the cookie values can be guessed if the algorithm for generating the cookie can be obtained. Some times the cookies are left on the client machine and can be stolen by exploiting another system vulnerability. Some times the cookies maybe intercepted using Ccross site scripting. This lesson tries to make the student aware of authentication cookies and presents the student with a way to defeat the cookie authentication method in this lesson.+ +
General Goal(s):
+ The user should be able to bypass the authentication check. \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/WeakSessionID.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/WeakSessionID.html new file mode 100644 index 000000000..2ea769f51 --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/WeakSessionID.html @@ -0,0 +1,9 @@ +
+
+Lesson Plan Title: How to Hijack a Session
+Concept / Topic To Teach:
+ +Application developers who develop their own session ID frequently forget to incorporate the complexity and randomness necessary for security. If the user specific session id is not complex and random, then the application is highly susceptible to session-based brute force attacks. +General Goal(s):
+Try to access an authenticated session belonging to someone else. + \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/WelcomeScreeen.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/WelcomeScreeen.html new file mode 100644 index 000000000..be93e40e2 --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/WelcomeScreeen.html @@ -0,0 +1,16 @@ +
+
+Lesson Plan Title:Welcome
+Concept / Topic To Teach:
+This lesson presents the basics for understanding the transfer of data between the browser and the web application. +Standards Addressed:
+General Goal(s):
+Specific Objectives:
+Required Materials:
+Anticipatory Set (Lead-In):
+Step-By-Step Procedures:
+Plan For Independent Practice:
+Closure (Reflect Anticipatory Set):
+Assessment Based On Objectives:
+Extensions (For Gifted Students):
+Possible Connections To Other Subjects:
\ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/WsSAXInjection.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/WsSAXInjection.html new file mode 100644 index 000000000..60232826e --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/WsSAXInjection.html @@ -0,0 +1,9 @@ +
+
+Lesson Plan Title: How to Perform Web Service SAX Injection
+Concept / Topic To Teach:
+ +Web Services communicate through the use of SOAP requests. These requests are submitted to a web service in an attempt to execute a function listed in the web service definition language (WSDL). +General Goal(s):
+Some web interfaces make use of Web Services in the background. If the frontend relies on the web service for all input validation, it may be possible to corrupt the XML that the web interface sends.In this exercise, try to change the password for a user other than 101. + \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_plans/WsSqlInjection.html b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/WsSqlInjection.html new file mode 100644 index 000000000..352540f48 --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_plans/WsSqlInjection.html @@ -0,0 +1,9 @@ +
+
+Lesson Plan Title: How to Perform Web Service SQL Injection
+Concept / Topic To Teach:
+ +Web Services communicate through the use of SOAP requests. These requests are submitted to a web service in an attempt to execute a function listed in the web service definition language (WSDL). +General Goal(s):
+Check the web service description language (WSDL) and try to obtain multiple customer credit card numbers. You will not see the results returned to this screen. When you believe you have suceeded, refresh the page and look for the 'green star' + \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_template/lessons.html b/ webgoat/main/project/JavaSource/WebContent/lesson_template/lessons.html new file mode 100644 index 000000000..2ff81d53a --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lesson_template/lessons.html @@ -0,0 +1,88 @@ + + + + + + 
+ |
+
+
+ + +Show Source +
+
+
+
+ Ask Dave what Penut Butter and Jelly means to VanGuard.
+ Ask Dave what Penut Butter and Jelly means to VanGuard.
+ Ask Dave what Penut Butter and Jelly means to VanGuard.
+ Ask Dave what Penut Butter and Jelly means to VanGuard.
+ Ask Dave what Penut Butter and Jelly means to VanGuard.
+ Ask Dave what Penut Butter and Jelly means to VanGuard.
+ Ask Dave what Penut Butter and Jelly means to VanGuard.
+ Ask Dave what Penut Butter and Jelly means to VanGuard.
+ Ask Dave what Penut Butter and Jelly means to VanGuard.
+ Ask Dave what Penut Butter and Jelly means to VanGuard.
+ Ask Dave what Penut Butter and Jelly means to VanGuard.
+ Ask Dave what Penut Butter and Jelly means to VanGuard.
+
+ +Show Hint +
+
+
+
+
+ 00000000000000000000000.
+ 00000000000000000000000.
+ 00000000000000000000000.
+ 00000000000000000000000.
+ 00000000000000000000000.
+
+
+
+
+ 11111111111111111111111.
+ 11111111111111111111111.
+ 11111111111111111111111.
+ 11111111111111111111111.
+ 11111111111111111111111.
+ 11111111111111111111111.
+
+
+
+ 33333333333333333333333.
+ 33333333333333333333333.
+ 33333333333333333333333.
+ 33333333333333333333333.
+ 33333333333333333333333.
+ 33333333333333333333333.
+
+ + +Lesson + +
+
+
+
+
diff --git a/ webgoat/main/project/JavaSource/WebContent/lesson_template/logo.jpg b/ webgoat/main/project/JavaSource/WebContent/lesson_template/logo.jpg
new file mode 100644
index 000000000..14c4b290d
Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lesson_template/logo.jpg differ
diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/CrossSiteScripting.css b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/CrossSiteScripting.css
new file mode 100644
index 000000000..fad6880ad
--- /dev/null
+++ b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/CrossSiteScripting.css
@@ -0,0 +1,14 @@
+#lesson_wrapper {height: 435px;width: 500px;}
+#lesson_header {background-image: url(lessons/CrossSiteScripting/images/lesson1_header.jpg);width: 490px;padding-right: 10px;padding-top: 60px;background-repeat: no-repeat;}
+.lesson_workspace {background-image: url(lessons/CrossSiteScripting/images/lesson1_workspace.jpg);width: 489px;height: 325px;padding-left: 10px;padding-top: 10px;background-repeat: no-repeat;}
+.lesson_text {height: 240px;width: 460px;padding-top: 5px;}
+#lesson_buttons_bottom {height: 20px;width: 460px;}
+#lesson_b_b_left {width: 300px;float: left;}
+#lesson_b_b_right input {width: 100px;float: right;}
+.lesson_title_box {height: 20px;width: 420px;padding-left: 30px;}
+.lesson_workspace { }
+.lesson_txt_10 {font-family: Arial, Helvetica, sans-serif;font-size: 10px;}
+.lesson_text_db {color: #0066FF}
+#lesson_login {background-image: url(lessons/CrossSiteScripting/images/lesson1_loginWindow.jpg);height: 124px;width: 311px;background-repeat: no-repeat;padding-top: 30px;margin-left: 80px;margin-top: 50px;text-align: center;}
+#lesson_login_txt {font-family: Arial, Helvetica, sans-serif;font-size: 12px;text-align: center;}
+#lesson_search {background-image: url(lessons/CrossSiteScripting/images/lesson1_SearchWindow.jpg);height: 124px;width: 311px;background-repeat: no-repeat;padding-top: 30px;margin-left: 80px;margin-top: 50px;text-align: center;}
diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/CrossSiteScripting.jsp b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/CrossSiteScripting.jsp
new file mode 100644
index 000000000..278ca864f
--- /dev/null
+++ b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/CrossSiteScripting.jsp
@@ -0,0 +1,26 @@
+<%@ page contentType="text/html; charset=ISO-8859-1" language="java"
+ import="org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.CrossSiteScripting.*"
+ errorPage="" %>
+
+<%
+WebSession webSession = ((WebSession)session.getAttribute("websession"));
+CrossSiteScripting currentLesson = (CrossSiteScripting) webSession.getCurrentLesson();
+%>
++ LESSON LEARNED +
+
+
+
\ No newline at end of file
diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/EditProfile.jsp b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/EditProfile.jsp
new file mode 100644
index 000000000..b679e149a
--- /dev/null
+++ b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/EditProfile.jsp
@@ -0,0 +1,133 @@
+<%@ page contentType="text/html; charset=ISO-8859-1" language="java"
+ import="java.util.*, org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.CrossSiteScripting.*"
+ errorPage="" %>
+<%
+ WebSession webSession = ((WebSession)session.getAttribute("websession"));
+ Employee employee = (Employee) session.getAttribute("CrossSiteScripting.Employee");
+%>
+
+ <%
+ String subViewPage = currentLesson.getPage(webSession);
+ if (subViewPage != null)
+ {
+ //System.out.println("Including sub view page: " + subViewPage);
+ %>
+
+Welcome Back <%=webSession.getUserNameInLesson()%>
+
+
+
diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/Login.jsp b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/Login.jsp
new file mode 100644
index 000000000..15b679d96
--- /dev/null
+++ b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/Login.jsp
@@ -0,0 +1,37 @@
+<%@ page contentType="text/html; charset=ISO-8859-1" language="java"
+ import="java.util.*, org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.CrossSiteScripting.*"
+ errorPage="" %>
+
An error has occurred. diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_SearchWindow.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_SearchWindow.jpg new file mode 100644 index 000000000..39e1ed80d Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_SearchWindow.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_header.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_header.jpg new file mode 100644 index 000000000..60a809af0 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_header.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_loginWindow.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_loginWindow.jpg new file mode 100644 index 000000000..c91f8a052 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_loginWindow.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_menu.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_menu.jpg new file mode 100644 index 000000000..2c9512571 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_menu.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_workspace.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_workspace.jpg new file mode 100644 index 000000000..292d25654 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_workspace.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/EditProfile.jsp b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/EditProfile.jsp new file mode 100644 index 000000000..3f187bfce --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/EditProfile.jsp @@ -0,0 +1,136 @@ +<%@ page contentType="text/html; charset=ISO-8859-1" language="java" + import="java.util.*, org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.RoleBasedAccessControl.*" + errorPage="" %> +<% + WebSession webSession = ((WebSession)session.getAttribute("websession")); + Employee employee = (Employee) session.getAttribute("RoleBasedAccessControl.Employee"); +%> +
+
+
+
An error has occurred. +
+ \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/accessControl.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/accessControl.jpg new file mode 100644 index 000000000..e9af72c50 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/accessControl.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/dbSchema.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/dbSchema.jpg new file mode 100644 index 000000000..457b634d0 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/dbSchema.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_SearchWindow.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_SearchWindow.jpg new file mode 100644 index 000000000..39e1ed80d Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_SearchWindow.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_header.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_header.jpg new file mode 100644 index 000000000..60a809af0 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_header.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_loginWindow.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_loginWindow.jpg new file mode 100644 index 000000000..c91f8a052 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_loginWindow.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_menu.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_menu.jpg new file mode 100644 index 000000000..2c9512571 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_menu.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_workspace.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_workspace.jpg new file mode 100644 index 000000000..292d25654 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_workspace.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/orgChart.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/orgChart.jpg new file mode 100644 index 000000000..016c0d162 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/orgChart.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/EditProfile.jsp b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/EditProfile.jsp new file mode 100644 index 000000000..01ff93cde --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/EditProfile.jsp @@ -0,0 +1,133 @@ +<%@ page contentType="text/html; charset=ISO-8859-1" language="java" + import="java.util.*, org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.SQLInjection.*" + errorPage="" %> +<% + WebSession webSession = ((WebSession)session.getAttribute("websession")); + Employee employee = (Employee) session.getAttribute("SQLInjection.Employee"); +%> +
+
+
+
An error has occurred. diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_SearchWindow.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_SearchWindow.jpg new file mode 100644 index 000000000..39e1ed80d Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_SearchWindow.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_header.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_header.jpg new file mode 100644 index 000000000..60a809af0 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_header.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_loginWindow.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_loginWindow.jpg new file mode 100644 index 000000000..c91f8a052 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_loginWindow.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_menu.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_menu.jpg new file mode 100644 index 000000000..2c9512571 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_menu.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_workspace.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_workspace.jpg new file mode 100644 index 000000000..292d25654 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_workspace.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/main.jsp b/ webgoat/main/project/JavaSource/WebContent/main.jsp new file mode 100644 index 000000000..543ce93b7 --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/main.jsp @@ -0,0 +1,227 @@ +<%@ page contentType="text/html; charset=ISO-8859-1" language="java" + import="org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.*, java.util.*" + errorPage="" %> +<% +Course course = ((Course)session.getAttribute("course")); +WebSession webSession = ((WebSession)session.getAttribute("websession")); +AbstractLesson currentLesson = webSession.getCurrentLesson(); +%> + + + + + +<%=currentLesson.getTitle()%>
+
+
+
+
+
+
+
+
+
+
+<%
+final String menuPrefix = "menu";
+final String submenuPrefix = "submenu";
+final String mbutPrefix = "mbut";
+String printHint = "";
+String printParameters = "";
+String printCookies = "";
+String lessonComplete = "![](\"images/buttons/lessonComplete.jpg\")
";
+String m = "menu";
+String menu = request.getParameter(m);
+
+List categories = course.getCategories();
+
+StringBuffer buildList = new StringBuffer();
+
+ Iterator iter1 = categories.iterator();
+ while(iter1.hasNext())
+ {
+ Category category = (Category)iter1.next();
+
+ buildList.append("'");
+ buildList.append(menuPrefix);
+ buildList.append(category.getRanking());
+ buildList.append("','");
+ buildList.append(submenuPrefix);
+ buildList.append(category.getRanking());
+ buildList.append("','");
+ buildList.append(mbutPrefix);
+ buildList.append(category.getRanking());
+ buildList.append("'");
+
+ if (iter1.hasNext())
+ buildList.append(",");
+ }%>
+
+
+ Untitled Document
+
+
+
+ WebGoat V4
+
+
+
+
+
+ WebGoat V4
+
+
+
+
+
+
\ No newline at end of file
diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/SearchStaff.jsp b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/SearchStaff.jsp
new file mode 100644
index 000000000..6aee0e043
--- /dev/null
+++ b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/SearchStaff.jsp
@@ -0,0 +1,22 @@
+<%@ page contentType="text/html; charset=ISO-8859-1" language="java"
+ import="org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.CrossSiteScripting.*"
+ errorPage="" %>
+
+ <%
+ WebSession webSession = ((WebSession)session.getAttribute("websession"));
+ %>
+
+
+
+ <%
+ WebSession webSession = ((WebSession)session.getAttribute("websession"));
+ String searchedName = request.getParameter(CrossSiteScripting.SEARCHNAME);
+ if (searchedName != null)
+ {
+ %>
+ Employee <%=searchedName%> not found.
+ <%
+ }
+ %>
+
+
\ No newline at end of file
diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/ViewProfile.jsp b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/ViewProfile.jsp
new file mode 100644
index 000000000..0b719dab6
--- /dev/null
+++ b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/ViewProfile.jsp
@@ -0,0 +1,174 @@
+
+<%@ page contentType="text/html; charset=ISO-8859-1" language="java"
+ import="org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.CrossSiteScripting.*" errorPage="" %>
+<%
+WebSession webSession = ((WebSession)session.getAttribute("websession"));
+ Employee employee = (Employee) session.getAttribute("CrossSiteScripting." + CrossSiteScripting.EMPLOYEE_ATTRIBUTE_KEY);
+// int myUserId = getIntSessionAttribute(webSession, "CrossSiteScripting." + CrossSiteScripting.USER_ID);
+%>
+ Welcome Back <%=webSession.getUserNameInLesson()%>
+
+
+
+
+
+
+
+
+ <%
+ if (webSession.getCurrentLesson().getStage(webSession) == 1005)
+ {
+ webSession.getCurrentLesson().setStage(webSession, 5);
+ //System.out.println("Reloading ViewProfile.jsp for stage 5 transition");
+ String thisPage = webSession.getCurrentLink();
+ //System.out.println("Redirecting to " + thisPage);
+ %>
+
+ <%
+ }
+ %>
\ No newline at end of file
diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/error.jsp b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/error.jsp
new file mode 100644
index 000000000..5af0a45dc
--- /dev/null
+++ b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/error.jsp
@@ -0,0 +1,3 @@
+<%@ page contentType="text/html; charset=ISO-8859-1" language="java"
+ errorPage="" %>
+| + First Name: + | ++ <%=employee.getFirstName()%> + | ++ Last Name: + | ++ <%=employee.getLastName()%> + | +
| + Street: + | ++ + + <%=employee.getAddress1()%> + | ++ City/State: + | + <%=employee.getAddress2()%> + | +
| + Phone: + | ++ <%=employee.getPhoneNumber()%> + | ++ Start Date: + | ++ <%=employee.getStartDate()%> + | +
| + SSN: + | ++ <%=employee.getSsn()%> + | ++ Salary: + | ++ <%=employee.getSalary()%> + | +
| + Credit Card: + | ++ <%=employee.getCcn()%> + | ++ Credit Card Limit: + | ++ <%=employee.getCcnLimit()%> + | +
| + Comments: + | ++ + + <%=webSession.htmlEncode(employee.getPersonalDescription())%> + | ++ Manager: + | ++ <%=employee.getManager()%> + | +
| + Disciplinary Explanation: + | ++ <%=employee.getDisciplinaryActionNotes()%> + | ++ Disciplinary Action Dates: + | ++ <%=employee.getDisciplinaryActionDate()%> + | +
An error has occurred. diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_SearchWindow.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_SearchWindow.jpg new file mode 100644 index 000000000..39e1ed80d Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_SearchWindow.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_header.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_header.jpg new file mode 100644 index 000000000..60a809af0 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_header.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_loginWindow.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_loginWindow.jpg new file mode 100644 index 000000000..c91f8a052 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_loginWindow.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_menu.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_menu.jpg new file mode 100644 index 000000000..2c9512571 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_menu.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_workspace.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_workspace.jpg new file mode 100644 index 000000000..292d25654 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/CrossSiteScripting/images/lesson1_workspace.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/EditProfile.jsp b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/EditProfile.jsp new file mode 100644 index 000000000..3f187bfce --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/EditProfile.jsp @@ -0,0 +1,136 @@ +<%@ page contentType="text/html; charset=ISO-8859-1" language="java" + import="java.util.*, org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.RoleBasedAccessControl.*" + errorPage="" %> +<% + WebSession webSession = ((WebSession)session.getAttribute("websession")); + Employee employee = (Employee) session.getAttribute("RoleBasedAccessControl.Employee"); +%> +
Welcome Back <%=webSession.getUserNameInLesson()%> - Edit Profile Page
+
+
+
\ No newline at end of file
diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/ListStaff.jsp b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/ListStaff.jsp
new file mode 100644
index 000000000..8a1e3edbf
--- /dev/null
+++ b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/ListStaff.jsp
@@ -0,0 +1,55 @@
+<%@ page contentType="text/html; charset=ISO-8859-1" language="java"
+ import="java.util.*, org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.RoleBasedAccessControl.*"
+ errorPage="" %>
+<%
+ WebSession webSession = ((WebSession)session.getAttribute("websession"));
+ int myUserId = webSession.getUserIdInLesson();
+%>
+ Welcome Back <%=webSession.getUserNameInLesson()%> - Staff Listing Page
+ +
+
+
Select from the list below
+ + + \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/Login.jsp b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/Login.jsp new file mode 100644 index 000000000..4550556de --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/Login.jsp @@ -0,0 +1,37 @@ +<%@ page contentType="text/html; charset=ISO-8859-1" language="java" + import="java.util.*, org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.RoleBasedAccessControl.*" + errorPage="" %> +
+
\ No newline at end of file
diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/RoleBasedAccessControl.css b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/RoleBasedAccessControl.css
new file mode 100644
index 000000000..f38977fcf
--- /dev/null
+++ b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/RoleBasedAccessControl.css
@@ -0,0 +1,14 @@
+#lesson_wrapper {height: 435px;width: 500px;}
+#lesson_header {background-image: url(lessons/RoleBasedAccessControl/images/lesson1_header.jpg);width: 490px;padding-right: 10px;padding-top: 60px;background-repeat: no-repeat;}
+.lesson_workspace {background-image: url(lessons/RoleBasedAccessControl/images/lesson1_workspace.jpg);width: 489px;height: 325px;padding-left: 10px;padding-top: 10px;background-repeat: no-repeat;}
+.lesson_text {height: 240px;width: 460px;padding-top: 5px;}
+#lesson_buttons_bottom {height: 20px;width: 460px;}
+#lesson_b_b_left {width: 300px;float: left;}
+#lesson_b_b_right input {width: 100px;float: right;}
+.lesson_title_box {height: 20px;width: 420px;padding-left: 30px;}
+.lesson_workspace { }
+.lesson_txt_10 {font-family: Arial, Helvetica, sans-serif;font-size: 10px;}
+.lesson_text_db {color: #0066FF}
+#lesson_login {background-image: url(lessons/RoleBasedAccessControl/images/lesson1_loginWindow.jpg);height: 124px;width: 311px;background-repeat: no-repeat;padding-top: 30px;margin-left: 80px;margin-top: 50px;text-align: center;}
+#lesson_login_txt {font-family: Arial, Helvetica, sans-serif;font-size: 12px;text-align: center;}
+#lesson_search {background-image: url(lessons/RoleBasedAccessControl/images/lesson1_SearchWindow.jpg);height: 124px;width: 311px;background-repeat: no-repeat;padding-top: 30px;margin-left: 80px;margin-top: 50px;text-align: center;}
diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/RoleBasedAccessControl.jsp b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/RoleBasedAccessControl.jsp
new file mode 100644
index 000000000..979cfb569
--- /dev/null
+++ b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/RoleBasedAccessControl.jsp
@@ -0,0 +1,26 @@
+<%@ page contentType="text/html; charset=ISO-8859-1" language="java"
+ import="org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.RoleBasedAccessControl.*"
+ errorPage="" %>
+
+<%
+WebSession webSession = ((WebSession)session.getAttribute("websession"));
+RoleBasedAccessControl currentLesson = (RoleBasedAccessControl) webSession.getCurrentLesson();
+%>
+
+ <%
+ WebSession webSession = ((WebSession)session.getAttribute("websession"));
+ %>
+
+
+
+
+
\ No newline at end of file
diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/SearchStaff.jsp b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/SearchStaff.jsp
new file mode 100644
index 000000000..615c45b7a
--- /dev/null
+++ b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/SearchStaff.jsp
@@ -0,0 +1,22 @@
+<%@ page contentType="text/html; charset=ISO-8859-1" language="java"
+ import="org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.RoleBasedAccessControl.*"
+ errorPage="" %>
+
+ <%
+ String subViewPage = currentLesson.getPage(webSession);
+ if (subViewPage != null)
+ {
+ //System.out.println("Including sub view page: " + subViewPage);
+ %>
+
+
+ <%
+ WebSession webSession = ((WebSession)session.getAttribute("websession"));
+ String searchedName = request.getParameter(RoleBasedAccessControl.SEARCHNAME);
+ if (searchedName != null)
+ {
+ %>
+ Employee <%=searchedName%> not found.
+ <%
+ }
+ %>
+
+
\ No newline at end of file
diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/ViewProfile.jsp b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/ViewProfile.jsp
new file mode 100644
index 000000000..81d211ca4
--- /dev/null
+++ b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/ViewProfile.jsp
@@ -0,0 +1,157 @@
+<%@ page contentType="text/html; charset=ISO-8859-1" language="java"
+ import="org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.RoleBasedAccessControl.*"
+ errorPage="" %>
+<%
+ Employee employee = (Employee) session.getAttribute("RoleBasedAccessControl." + RoleBasedAccessControl.EMPLOYEE_ATTRIBUTE_KEY);
+ WebSession webSession = ((WebSession)session.getAttribute("websession"));
+// int myUserId = getIntSessionAttribute(webSession, "RoleBasedAccessControl." + RoleBasedAccessControl.USER_ID);
+%>
+ Welcome Back <%=webSession.getUserNameInLesson()%> - View Profile Page
+
+
+
+
+
\ No newline at end of file
diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/error.jsp b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/error.jsp
new file mode 100644
index 000000000..9c4caeac6
--- /dev/null
+++ b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/error.jsp
@@ -0,0 +1,13 @@
+<%@ page contentType="text/html; charset=ISO-8859-1" language="java"
+ import="org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.RoleBasedAccessControl.*"
+ errorPage="" %>
+<%
+ WebSession webSession = ((WebSession)session.getAttribute("websession"));
+// int myUserId = getIntSessionAttribute(webSession, "RoleBasedAccessControl." + RoleBasedAccessControl.USER_ID);
+%>
+| + First Name: + | ++ <%=employee.getFirstName()%> + | ++ Last Name: + | ++ <%=employee.getLastName()%> + | +
| + Street: + | ++ <%=employee.getAddress1()%> + | ++ City/State: + | + <%=employee.getAddress2()%> + | +
| + Phone: + | ++ <%=employee.getPhoneNumber()%> + | ++ Start Date: + | ++ <%=employee.getStartDate()%> + | +
| + SSN: + | ++ <%=employee.getSsn()%> + | ++ Salary: + | ++ <%=employee.getSalary()%> + | +
| + Credit Card: + | ++ <%=employee.getCcn()%> + | ++ Credit Card Limit: + | ++ <%=employee.getCcnLimit()%> + | +
| + Comments: + | ++ <%=employee.getPersonalDescription()%> + | +||
| + Disciplinary Explanation: + | ++ Disc. Dates: + | ++ <%=employee.getDisciplinaryActionDate()%> + | +|
| + <%=employee.getDisciplinaryActionNotes()%> + | +|||
| + Manager: + | ++ <%=employee.getManager()%> + | +||
An error has occurred. +
+ \ No newline at end of file diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/accessControl.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/accessControl.jpg new file mode 100644 index 000000000..e9af72c50 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/accessControl.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/dbSchema.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/dbSchema.jpg new file mode 100644 index 000000000..457b634d0 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/dbSchema.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_SearchWindow.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_SearchWindow.jpg new file mode 100644 index 000000000..39e1ed80d Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_SearchWindow.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_header.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_header.jpg new file mode 100644 index 000000000..60a809af0 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_header.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_loginWindow.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_loginWindow.jpg new file mode 100644 index 000000000..c91f8a052 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_loginWindow.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_menu.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_menu.jpg new file mode 100644 index 000000000..2c9512571 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_menu.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_workspace.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_workspace.jpg new file mode 100644 index 000000000..292d25654 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/lesson1_workspace.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/orgChart.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/orgChart.jpg new file mode 100644 index 000000000..016c0d162 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/RoleBasedAccessControl/images/orgChart.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/EditProfile.jsp b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/EditProfile.jsp new file mode 100644 index 000000000..01ff93cde --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/EditProfile.jsp @@ -0,0 +1,133 @@ +<%@ page contentType="text/html; charset=ISO-8859-1" language="java" + import="java.util.*, org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.SQLInjection.*" + errorPage="" %> +<% + WebSession webSession = ((WebSession)session.getAttribute("websession")); + Employee employee = (Employee) session.getAttribute("SQLInjection.Employee"); +%> +
Welcome Back <%=webSession.getUserNameInLesson()%>
+
+
+
\ No newline at end of file
diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/ListStaff.jsp b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/ListStaff.jsp
new file mode 100644
index 000000000..e58dba86b
--- /dev/null
+++ b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/ListStaff.jsp
@@ -0,0 +1,55 @@
+<%@ page contentType="text/html; charset=ISO-8859-1" language="java"
+ import="java.util.*, org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.SQLInjection.*"
+ errorPage="" %>
+<%
+ WebSession webSession = ((WebSession)session.getAttribute("websession"));
+ int myUserId = webSession.getUserIdInLesson();
+%>
+ Welcome Back <%=webSession.getUserNameInLesson()%> - Staff Listing Page
+ +
+
+
Select from the list below
+ + + diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/Login.jsp b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/Login.jsp new file mode 100644 index 000000000..59a2f2ae3 --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/Login.jsp @@ -0,0 +1,37 @@ +<%@ page contentType="text/html; charset=ISO-8859-1" language="java" + import="java.util.*, org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.SQLInjection.*" + errorPage="" %> +
+
\ No newline at end of file
diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/SQLInjection.css b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/SQLInjection.css
new file mode 100644
index 000000000..177129117
--- /dev/null
+++ b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/SQLInjection.css
@@ -0,0 +1,14 @@
+#lesson_wrapper {height: 435px;width: 500px;}
+#lesson_header {background-image: url(lessons/SQLInjection/images/lesson1_header.jpg);width: 490px;padding-right: 10px;padding-top: 60px;background-repeat: no-repeat;}
+.lesson_workspace {background-image: url(lessons/SQLInjection/images/lesson1_workspace.jpg);width: 489px;height: 325px;padding-left: 10px;padding-top: 10px;background-repeat: no-repeat;}
+.lesson_text {height: 240px;width: 460px;padding-top: 5px;}
+#lesson_buttons_bottom {height: 20px;width: 460px;}
+#lesson_b_b_left {width: 300px;float: left;}
+#lesson_b_b_right input {width: 100px;float: right;}
+.lesson_title_box {height: 20px;width: 420px;padding-left: 30px;}
+.lesson_workspace { }
+.lesson_txt_10 {font-family: Arial, Helvetica, sans-serif;font-size: 10px;}
+.lesson_text_db {color: #0066FF}
+#lesson_login {background-image: url(lessons/SQLInjection/images/lesson1_loginWindow.jpg);height: 124px;width: 311px;background-repeat: no-repeat;padding-top: 30px;margin-left: 80px;margin-top: 50px;text-align: center;}
+#lesson_login_txt {font-family: Arial, Helvetica, sans-serif;font-size: 12px;text-align: center;}
+#lesson_search {background-image: url(lessons/SQLInjection/images/lesson1_SearchWindow.jpg);height: 124px;width: 311px;background-repeat: no-repeat;padding-top: 30px;margin-left: 80px;margin-top: 50px;text-align: center;}
diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/SQLInjection.jsp b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/SQLInjection.jsp
new file mode 100644
index 000000000..b5da130e8
--- /dev/null
+++ b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/SQLInjection.jsp
@@ -0,0 +1,26 @@
+<%@ page contentType="text/html; charset=ISO-8859-1" language="java"
+ import="org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.SQLInjection.*"
+ errorPage="" %>
+
+<%
+WebSession webSession = ((WebSession)session.getAttribute("websession"));
+SQLInjection currentLesson = (SQLInjection) webSession.getCurrentLesson();
+%>
+
+ <%
+ WebSession webSession = ((WebSession)session.getAttribute("websession"));
+ %>
+
+
+
+
+
\ No newline at end of file
diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/SearchStaff.jsp b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/SearchStaff.jsp
new file mode 100644
index 000000000..c30bd53ab
--- /dev/null
+++ b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/SearchStaff.jsp
@@ -0,0 +1,22 @@
+<%@ page contentType="text/html; charset=ISO-8859-1" language="java"
+ import="org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.SQLInjection.*"
+ errorPage="" %>
+
+ <%
+ String subViewPage = currentLesson.getPage(webSession);
+ if (subViewPage != null)
+ {
+ //System.out.println("Including sub view page: " + subViewPage);
+ %>
+
+
+ <%
+ WebSession webSession = ((WebSession)session.getAttribute("websession"));
+ String searchedName = request.getParameter(SQLInjection.SEARCHNAME);
+ if (searchedName != null)
+ {
+ %>
+ Employee <%=searchedName%> not found.
+ <%
+ }
+ %>
+
+
\ No newline at end of file
diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/ViewProfile.jsp b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/ViewProfile.jsp
new file mode 100644
index 000000000..eaabd5a9d
--- /dev/null
+++ b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/ViewProfile.jsp
@@ -0,0 +1,154 @@
+<%@ page contentType="text/html; charset=ISO-8859-1" language="java"
+ import="org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.SQLInjection.*"
+ errorPage="" %>
+<%
+ WebSession webSession = ((WebSession)session.getAttribute("websession"));
+ Employee employee = (Employee) session.getAttribute("SQLInjection." + SQLInjection.EMPLOYEE_ATTRIBUTE_KEY);
+// int myUserId = getIntSessionAttribute(webSession, "SQLInjection." + SQLInjection.USER_ID);
+%>
+ Welcome Back <%=webSession.getUserNameInLesson()%>
+
+
+
+
+
\ No newline at end of file
diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/error.jsp b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/error.jsp
new file mode 100644
index 000000000..5af0a45dc
--- /dev/null
+++ b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/error.jsp
@@ -0,0 +1,3 @@
+<%@ page contentType="text/html; charset=ISO-8859-1" language="java"
+ errorPage="" %>
+| + First Name: + | ++ <%=employee.getFirstName()%> + | ++ Last Name: + | ++ <%=employee.getLastName()%> + | +
| + Street: + | ++ <%=employee.getAddress1()%> + | ++ City/State: + | + <%=employee.getAddress2()%> + | +
| + Phone: + | ++ <%=employee.getPhoneNumber()%> + | ++ Start Date: + | ++ <%=employee.getStartDate()%> + | +
| + SSN: + | ++ <%=employee.getSsn()%> + | ++ Salary: + | ++ <%=employee.getSalary()%> + | +
| + Credit Card: + | ++ <%=employee.getCcn()%> + | ++ Credit Card Limit: + | ++ <%=employee.getCcnLimit()%> + | +
| + Comments: + | ++ <%=employee.getPersonalDescription()%> + | ++ Manager: + | ++ <%=employee.getManager()%> + | +
| + Disciplinary Explanation: + | ++ <%=employee.getDisciplinaryActionNotes()%> + | ++ Disciplinary Action Dates: + | ++ <%=employee.getDisciplinaryActionDate()%> + | +
An error has occurred. diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_SearchWindow.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_SearchWindow.jpg new file mode 100644 index 000000000..39e1ed80d Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_SearchWindow.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_header.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_header.jpg new file mode 100644 index 000000000..60a809af0 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_header.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_loginWindow.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_loginWindow.jpg new file mode 100644 index 000000000..c91f8a052 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_loginWindow.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_menu.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_menu.jpg new file mode 100644 index 000000000..2c9512571 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_menu.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_workspace.jpg b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_workspace.jpg new file mode 100644 index 000000000..292d25654 Binary files /dev/null and b/ webgoat/main/project/JavaSource/WebContent/lessons/SQLInjection/images/lesson1_workspace.jpg differ diff --git a/ webgoat/main/project/JavaSource/WebContent/main.jsp b/ webgoat/main/project/JavaSource/WebContent/main.jsp new file mode 100644 index 000000000..543ce93b7 --- /dev/null +++ b/ webgoat/main/project/JavaSource/WebContent/main.jsp @@ -0,0 +1,227 @@ +<%@ page contentType="text/html; charset=ISO-8859-1" language="java" + import="org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.*, java.util.*" + errorPage="" %> +<% +Course course = ((Course)session.getAttribute("course")); +WebSession webSession = ((WebSession)session.getAttribute("websession")); +AbstractLesson currentLesson = webSession.getCurrentLesson(); +%> + + + + + +
";
+String m = "menu";
+String menu = request.getParameter(m);
+
+List categories = course.getCategories();
+
+StringBuffer buildList = new StringBuffer();
+
+ Iterator iter1 = categories.iterator();
+ while(iter1.hasNext())
+ {
+ Category category = (Category)iter1.next();
+
+ buildList.append("'");
+ buildList.append(menuPrefix);
+ buildList.append(category.getRanking());
+ buildList.append("','");
+ buildList.append(submenuPrefix);
+ buildList.append(category.getRanking());
+ buildList.append("','");
+ buildList.append(mbutPrefix);
+ buildList.append(category.getRanking());
+ buildList.append("'");
+
+ if (iter1.hasNext())
+ buildList.append(",");
+ }%>
+
+
+
+ <%
+ int topCord = 140;
+ int zIndex = 105;
+
+ Iterator iter2 = categories.iterator();
+ while(iter2.hasNext())
+ {
+ Category category = (Category)iter2.next();
+ %>
+
+ <%
+ topCord=topCord + 30;
+ zIndex=zIndex + 1;
+ }
+
+ int topSubMenu = 72;
+
+ Iterator iter3 = categories.iterator();
+ while(iter3.hasNext())
+ {
+ Category category = (Category)iter3.next();
+ List lessons = webSession.getLessons(category);
+ Iterator iter4 = lessons.iterator();
+ %>
+ <%
+ }%>
+
+
+
+
diff --git a/ webgoat/main/project/JavaSource/WebContent/sideWindow.jsp b/ webgoat/main/project/JavaSource/WebContent/sideWindow.jsp
new file mode 100644
index 000000000..4ffa465ae
--- /dev/null
+++ b/ webgoat/main/project/JavaSource/WebContent/sideWindow.jsp
@@ -0,0 +1,28 @@
+<%@ page contentType="text/html; charset=ISO-8859-1" language="java"
+ import="org.owasp.webgoat.session.*"
+ errorPage="" %>
+
+<%
+WebSession webSession = ((WebSession)session.getAttribute("websession"));
+%>
+
+
+
+
+
+
<%=category.getName()%>
+ 
+
+ <%=currentLesson.getTitle()%>
+
+ <%
+ if (webSession.isAuthorizedInLesson(webSession.getRole(), WebSession.SHOWHINTS))
+ {
+ %>
+
+ 
+
+
+ 
+
+
+ 
+
+ <%}%>
+
+ 
+
+
+ 
+
+ <%
+ if (webSession.isAuthorizedInLesson(webSession.getRole(), WebSession.SHOWSOURCE))
+ {
+ %>
+
+ 
+
+
+ 
+
+ <%}%>
+
+
+
+
+
+
+
+
+
+ <%}%>
+
+
+
+
+
+
+ <%
+ if (webSession.isAuthorizedInLesson(webSession.getRole(), WebSession.SHOWSOURCE))
+ {
+ %>
+
+
+
+
+
+
+ <%}%>
+
+
+
+
+
+ <%
+ if (currentLesson != null)
+ {
+ %>
+
+ <%
+ }
+
+ if (webSession.getHint() != null)
+ {
+ printHint = "
"; + out.println(printHint); + } + + if (webSession.getParams() != null) + { + Iterator i = webSession.getParams().iterator(); + while (i.hasNext()) + { + Parameter p = (Parameter) i.next(); + printParameters = "
"; + out.println(printParameters); + } + } + + if (webSession.getCookies() != null) + { + Iterator i = webSession.getCookies().iterator(); + while (i.hasNext()) + { + Cookie c = (Cookie) i.next(); + printCookies = "
"; + out.println(printCookies); + } + }%> + +
+ " + webSession.getHint() + "
"; + out.println(printHint); + } + + if (webSession.getParams() != null) + { + Iterator i = webSession.getParams().iterator(); + while (i.hasNext()) + { + Parameter p = (Parameter) i.next(); + printParameters = "
" + p.getName() + "=" + p.getValue() + "
"; + out.println(printParameters); + } + } + + if (webSession.getCookies() != null) + { + Iterator i = webSession.getCookies().iterator(); + while (i.hasNext()) + { + Cookie c = (Cookie) i.next(); + printCookies = "
" + c.getName() + " ![\"\"](\"images/icons/rightArrow.jpg\")
" + c.getValue() + "
" + c.getValue() + ""; + out.println(printCookies); + } + }%> + +
<%=webSession.getInstructions()%>
+ <%=webSession.getMessage()%>
+
+ <%
+ if (currentLesson.getTemplatePage(webSession) != null)
+ {
+ %>
+ <%=currentLesson.getContent()%>
+ <%
+ }
+ %>
+
+ <% out.println(currentLesson.getCredits());%>
+
+
+
+ OWASP Foundation | Project WebGoat
+
+ <%
+ String source = webSession.getSource();
+ if (source != null)
+ {
+ String printSource = "
"; + out.println(printSource); + } + %> +
+
+
diff --git a/ webgoat/main/project/JavaSource/WebContent/users/ReadMe.txt b/ webgoat/main/project/JavaSource/WebContent/users/ReadMe.txt
new file mode 100644
index 000000000..39f82909b
--- /dev/null
+++ b/ webgoat/main/project/JavaSource/WebContent/users/ReadMe.txt
@@ -0,0 +1 @@
+User-specific lesson state is stored under this directory.
\ No newline at end of file
diff --git a/ webgoat/main/project/JavaSource/WebContent/webgoat.jsp b/ webgoat/main/project/JavaSource/WebContent/webgoat.jsp
new file mode 100644
index 000000000..06bd8c535
--- /dev/null
+++ b/ webgoat/main/project/JavaSource/WebContent/webgoat.jsp
@@ -0,0 +1,81 @@
+<%@ page contentType="text/html; charset=ISO-8859-1" language="java"
+ errorPage="" %>
+
+
+
+
+
+" + source + "
"; + out.println(printSource); + } + %> +
+
+
+
+
diff --git a/ webgoat/main/project/JavaSource/WebContent/webgoat_challenge.jsp b/ webgoat/main/project/JavaSource/WebContent/webgoat_challenge.jsp
new file mode 100644
index 000000000..2aa7fed01
--- /dev/null
+++ b/ webgoat/main/project/JavaSource/WebContent/webgoat_challenge.jsp
@@ -0,0 +1,77 @@
+<%@ page contentType="text/html; charset=ISO-8859-1" language="java"
+ errorPage="" %>
+
+
+
+
+
+
+
+ Thank you for using WebGoat!
+This program is a demonstration of common web application flaws. + The exercises are intended to provide hands on experience with application + penetration testing techniques.
+
+
+
+
+
+ WebGoat Design Team |
+ Lesson Contributers |
+
|
+ Jeff Williams
+ Bruce Mayhew
+ Laurence Casey
+ David Anderson
+ Eric Sheridan
+ Dave Wichers
+ |
+ Aspect Security + (http://www.aspectsecurity.com) |
+
Alex Smolen + (http://www.parasoft.com) |
+ |
Rogan Dawes + (http://dawes.za.net/rogan) |
+ |
Chuck Willis + (http://www.securityfoundry.com) |
+ |
Documentation Contributer |
+ |
Robert Sullivan + (http://www.unitedhealthgroup.com/) |
+
WARNING
+ While running this program, your machine is extremely vulnerable to attack. + You should disconnect from the network while using this program. +
+
+ This program is for educational purposes only. + Use of these techniques without permission could lead to + job termination, financial liability, and/or criminal penalties. +
+ + While running this program, your machine is extremely vulnerable to attack. + You should disconnect from the network while using this program. +
+
+ This program is for educational purposes only. + Use of these techniques without permission could lead to + job termination, financial liability, and/or criminal penalties. +
+
+
+ 
+ 
+
+
+
+
+ Thank you for using WebGoat!
+This program is a demonstration of common web application flaws. + The exercises are intended to provide hands on experience with application + penetration testing techniques.
+
+
+
+
+
+ WebGoat Design Team |
+ Lesson Contributers |
+
Jeff Williams |
+ Aspect Security + (http://www.aspectsecurity.com) |
+
Bruce Mayhew |
+ Alex Smolen + (http://www.parasoft.com) |
+
Laurence Casey |
+ Rogan Dawes + (http://dawes.za.net/rogan) |
+
David Anderson |
+ Chuck Willis + (http://www.securityfoundry.com) |
+
Eric Sheridan |
+
WARNING
+ While running this program your machine will be extremely vulnerable to attack. + You should disconnect from the Internet while using this program. +
+
+ This program is for educational purposes only. + If you attempt these techniques without authorization, + you are very likely to get caught. + If you are caught engaging in unauthorized hacking, + most companies will fire you. + Claiming that you were doing security research will + not work as that is the first thing that all hackers claim. +
+
+ + While running this program your machine will be extremely vulnerable to attack. + You should disconnect from the Internet while using this program. +
+
+ This program is for educational purposes only. + If you attempt these techniques without authorization, + you are very likely to get caught. + If you are caught engaging in unauthorized hacking, + most companies will fire you. + Claiming that you were doing security research will + not work as that is the first thing that all hackers claim. +