Session Fixation instructions altered
git-svn-id: http://webgoat.googlecode.com/svn/trunk@340 4033779f-a91e-0410-96ef-6bf7bf53c507
This commit is contained in:
parent
3a1397f178
commit
2649bcb086
@ -738,7 +738,8 @@ public class SessionFixation extends SequentialLessonAdapter
|
||||
{
|
||||
instructions += "You are Hacker Joe and " +
|
||||
"you want to steal the session from Jane. " +
|
||||
"That is why you have to send a phishing mail " +
|
||||
"That is why you have to send a prepared mail " +
|
||||
"which looks like an official mail from the bank" +
|
||||
"to her. The mail is already prepared. Only " +
|
||||
"thing missing is a Session ID (SID) in the Link. Alter " +
|
||||
"the link to include a SID.<br><br><b>You are: Hacker Joe</b>";
|
||||
|
Loading…
x
Reference in New Issue
Block a user