Challenge jsp is supposed to be a clone of the webgoat.jsp
git-svn-id: http://webgoat.googlecode.com/svn/trunk@266 4033779f-a91e-0410-96ef-6bf7bf53c507
This commit is contained in:
		| @ -1,98 +1,124 @@ | ||||
| <%@ page contentType="text/html; charset=ISO-8859-1" language="java"  | ||||
| 	errorPage="" %> | ||||
| <%@ page contentType="text/html; charset=ISO-8859-1" language="java" | ||||
| 	errorPage=""%> | ||||
| <%@page import="org.owasp.webgoat.session.WebSession"%> | ||||
| <% WebSession webSession = ((WebSession)session.getAttribute("websession")); %> | ||||
| <% | ||||
| WebSession webSession = ((WebSession) session.getAttribute("websession")); | ||||
| %> | ||||
|  | ||||
| <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> | ||||
| <html xmlns="http://www.w3.org/1999/xhtml"> | ||||
| <head> | ||||
| <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" /> | ||||
| <title>WebGoat V5.1</title> | ||||
| <link rel="stylesheet" href="css/webgoat_challenge.css" type="text/css" /> | ||||
| <link rel="stylesheet" href="css/webgoat.css" type="text/css" /> | ||||
| </head> | ||||
|  | ||||
| <body> | ||||
|  | ||||
| 	<div id="wrap_ch"> | ||||
| 		<div id="top_ch"><img src="images/header/header.jpg" width="500" height="86" /></div> | ||||
| 		<div id="start_ch"> | ||||
| 		  <p>Thank you for using WebGoat!</p> | ||||
| 		  <p>This program is a demonstration of common web application flaws.   | ||||
| 		  The exercises are intended to provide hands on experience with application  | ||||
| 		  penetration testing techniques.  </p><p>The WebGoat project is lead by Bruce Mayhew. Please send all  | ||||
| 		  comments to Bruce at <%= webSession.getWebgoatContext().getFeedbackAddress() %>.</p> | ||||
| 		  <div id="team_ch"> | ||||
| 			<table border="0" align="center" class="lessonText"> | ||||
|                 <tr> | ||||
|                   <td width="50%"><div align="center"><a href="http://www.owasp.org"><img border="0" src="images/logos/owasp.jpg" alt="OWASP Foundation" longdesc="http://www.owasp.org" /></a></div></td> | ||||
|                   <td width="50%"><div align="center"><a href="http://www.aspectsecurity.com"><img border="0" src="images/logos/aspect.jpg" alt="Aspect Security" longdesc="http://www.aspectsecurity.com" /></a></div></td> | ||||
|                 </tr> | ||||
|                 <tr> | ||||
|                   <td width="50%"><div align="center"><span class="style1"><br />WebGoat Design Team </span></div></td> | ||||
|                   <td width="50%"><div align="center"><span class="style1"><br />Lesson Contributers </span></div></td> | ||||
|                 </tr> | ||||
|                 <tr> | ||||
|                   <td  valign="top"> | ||||
| 	                 <div align="center" class="style2">Bruce Mayhew</div> | ||||
| 	                 <div align="center" class="style2">Laurence Casey</div> | ||||
| 	                 <div align="center" class="style2">David Anderson</div> | ||||
| 	                 <div align="center" class="style2">Eric Sheridan</div> | ||||
| 	                 <div align="center" class="style2">Rogan Dawes</div> | ||||
| 	              </td> | ||||
|                   <td  valign="top"> | ||||
|                   	<div align="center" class="style2">Aspect Security</div> | ||||
|                    	<div align="center" class="style2">Sherif Koussa</div> | ||||
|                    	<div align="center" class="style2">Alex Smolen</div> | ||||
|                   	<div align="center" class="style2">Chuck Willis</div> | ||||
| <div id="wrap"> | ||||
| <div id="top"></div> | ||||
| <div id="start"> | ||||
| <p>Thank you for using WebGoat!</p> | ||||
| <p>This program is a demonstration of common web application flaws. | ||||
| The exercises are intended to provide hands on experience with | ||||
| application penetration testing techniques. </p><p>The WebGoat project is lead | ||||
| by Bruce Mayhew. Please send all comments to Bruce at <%=webSession.getWebgoatContext().getFeedbackAddress()%>.</p> | ||||
| <div id="team"> | ||||
| <table border="0" align="center" class="lessonText"> | ||||
| 	<tr> | ||||
| 		<td width="50%"> | ||||
| 		<div align="center"><a href="http://www.owasp.org"><img | ||||
| 			border="0" src="images/logos/owasp.jpg" alt="OWASP Foundation" | ||||
| 			longdesc="http://www.owasp.org" /></a></div> | ||||
| 		</td> | ||||
| 		<td width="50%"> | ||||
| 		<div align="center"><a href="http://www.aspectsecurity.com"><img | ||||
| 			border="0" src="images/logos/aspect.jpg" alt="Aspect Security" | ||||
| 			longdesc="http://www.aspectsecurity.com" /></a></div> | ||||
| 		</td> | ||||
| 	</tr> | ||||
| 	<tr> | ||||
| 		<td width="50%"> | ||||
| 		<div align="center"><span class="style1"><br /> | ||||
| 		WebGoat Design Team </span></div> | ||||
| 		</td> | ||||
| 		<td width="50%"> | ||||
| 		<div align="center"><span class="style1"><br /> | ||||
| 		Lesson Contributers </span></div> | ||||
| 		</td> | ||||
| 	</tr> | ||||
| 	<tr> | ||||
| 		<td valign="top"> | ||||
| 		<div align="center" class="style2">Bruce Mayhew</div> | ||||
| 		<div align="center" class="style2">David Anderson</div> | ||||
| 		<div align="center" class="style2">Rogan Dawes</div> | ||||
| 		<div align="center" class="style2">Laurence Casey (Graphics)</div> | ||||
| 		</td> | ||||
| 		<td valign="top"> | ||||
| 		<div align="center" class="style2">Aspect Security</div> | ||||
| 		<div align="center" class="style2">Sherif Koussa</div> | ||||
| 		<div align="center" class="style2">Romain Brechet</div> | ||||
| 		<div align="center" class="style2"></div> | ||||
|  | ||||
|                   </td> | ||||
|                 </tr> | ||||
|                 <tr> | ||||
|                   <td height="25" valign="bottom"><div align="center"><span class="style1">Special Thanks for V5</span></div></td> | ||||
|                   <td height="25" valign="bottom"><div align="center"><span class="style1">Documentation Contributers</span></div></td> | ||||
|                 </tr> | ||||
|                 <tr> | ||||
|                   <td><div align="center" class="style2">Sherif Koussa<br /> | ||||
|                   (http://www.macadamian.com)<br /> </div> | ||||
|                   </td> | ||||
|                   <td><div align="center" class="style2">Robert Sullivan<br /> | ||||
|                   (http://www.unitedhealthgroup.com/) </div> | ||||
|                   </td> | ||||
|                 </tr> | ||||
|                  <tr> | ||||
|                   <td><div align="center" class="style2">OWASP Autumn of Code<br /> | ||||
|                   (http://www.owasp.org/) </div></td> | ||||
|                   <td><div align="center" class="style2">Sherif Koussa<br />(http://www.macadamian.com)<br /></div> | ||||
|                   </td> | ||||
|                 </tr> | ||||
|                  <tr> | ||||
|                   <td><div align="center" class="style2">To all who have sent comments</div></td> | ||||
|                 </tr> | ||||
|                  <tr> | ||||
|                   <td><div align="center" class="style2"> </div></td> | ||||
|                 </tr> | ||||
|                 <tr> | ||||
|                   <td colspan = "2"> | ||||
|                     <div align="center" class="style2">			 | ||||
|                       <form id="form" name="form" method="post" action="attack"> | ||||
|     			            <input type="submit" name="start" value="Start WebGoat" /> | ||||
| 			          </form> | ||||
| 			        </div> | ||||
|                   </td> | ||||
|                 </tr> | ||||
|             </table> | ||||
| 		  </div> | ||||
| 	  </div> | ||||
| 		<div id="warning_ch"> WARNING<br /> | ||||
| 	      While running this program, your machine is extremely vulnerable to attack.  | ||||
| 	      You should disconnect from the network while using this program. | ||||
| 		  <br/> | ||||
| 		  <br/> | ||||
| 		  This program is for educational purposes only.  | ||||
| 		  Use of these techniques without permission could lead to  | ||||
| 		  job termination, financial liability, and/or criminal penalties. | ||||
| 	    </div> | ||||
| 	  </div> | ||||
| 		</td> | ||||
| 	</tr> | ||||
| 	<tr> | ||||
| 		<td height="25" valign="bottom"> | ||||
| 		<div align="center"><span class="style1">Special Thanks | ||||
| 		for V5.1</span></div> | ||||
| 		</td> | ||||
| 		<td height="25" valign="bottom"> | ||||
| 		<div align="center"><span class="style1">Documentation | ||||
| 		Contributers</span></div> | ||||
| 		</td> | ||||
| 	</tr> | ||||
| 	<tr> | ||||
| 		<td> | ||||
| 		<div align="center" class="style2">OWASP Spring of Code</div> | ||||
| 		<div align="center" class="style2">Erwin Geirnaert<br /> | ||||
| 		(http://www.zionsecurity.com)<br /> | ||||
| 		</div> | ||||
| 		</td> | ||||
| 		<td> | ||||
| 		<div align="center" class="style2">Sherif Koussa<br /> | ||||
| 		(http://www.macadamian.com)<br /> | ||||
| 		</div> | ||||
| 		<div align="center" class="style2">Erwin Geirnaert<br /> | ||||
| 		(http://www.zionsecurity.com/)</div> | ||||
| 		</td> | ||||
| 	</tr> | ||||
| 	<tr> | ||||
| 		<td> | ||||
| 		<div align="center" class="style2">To all who have sent comments</div> | ||||
| 		</td> | ||||
| 	</tr> | ||||
| 	<tr> | ||||
| 		<td colspan="2"> | ||||
| 		<div align="center" class="style2"> | ||||
| 		<form id="form" name="form" method="post" action="attack"><input | ||||
| 			type="submit" name="start" value="Start WebGoat" /></form> | ||||
| 		</div> | ||||
| 		</td> | ||||
| 	</tr> | ||||
| 	<tr> | ||||
| 		<td> | ||||
| 		<div align="center" class="style2"> </div> | ||||
| 		</td> | ||||
| 	</tr> | ||||
| </table> | ||||
| </div> | ||||
| </div> | ||||
| <div align="center" class="style2"> </div> | ||||
| <div align="center" class="style2"> </div> | ||||
| <div align="center" class="style2"> </div> | ||||
| <div id="warning">WARNING<br /> | ||||
| While running this program, your machine is extremely vulnerable to | ||||
| attack. You should disconnect from the network while using this program. | ||||
| <br /> | ||||
| <br /> | ||||
| This program is for educational purposes only. Use of these techniques | ||||
| without permission could lead to job termination, financial liability, | ||||
| and/or criminal penalties.</div> | ||||
| </div> | ||||
| </body> | ||||
| </html> | ||||
|  | ||||
|  | ||||
		Reference in New Issue
	
	Block a user