From 1493631f026ee686c46cbb805a61e19b0871ed6c Mon Sep 17 00:00:00 2001 From: "wirth.marcel" Date: Tue, 15 Apr 2008 09:43:34 +0000 Subject: [PATCH] Session Fixation instructions altered git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@340 4033779f-a91e-0410-96ef-6bf7bf53c507 --- .../JavaSource/org/owasp/webgoat/lessons/SessionFixation.java | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/main/project/JavaSource/org/owasp/webgoat/lessons/SessionFixation.java b/main/project/JavaSource/org/owasp/webgoat/lessons/SessionFixation.java index d1d98eb6e..1c567591f 100644 --- a/main/project/JavaSource/org/owasp/webgoat/lessons/SessionFixation.java +++ b/main/project/JavaSource/org/owasp/webgoat/lessons/SessionFixation.java @@ -738,7 +738,8 @@ public class SessionFixation extends SequentialLessonAdapter { instructions += "You are Hacker Joe and " + "you want to steal the session from Jane. " + - "That is why you have to send a phishing mail " + + "That is why you have to send a prepared mail " + + "which looks like an official mail from the bank" + "to her. The mail is already prepared. Only " + "thing missing is a Session ID (SID) in the Link. Alter " + "the link to include a SID.

You are: Hacker Joe";