Challenge jsp is supposed to be a clone of the webgoat.jsp

git-svn-id: http://webgoat.googlecode.com/svn/trunk@266 4033779f-a91e-0410-96ef-6bf7bf53c507
This commit is contained in:
mayhew64 2008-01-10 13:48:42 +00:00
parent ef79edca0a
commit 36ca8e5598

View File

@ -1,98 +1,124 @@
<%@ page contentType="text/html; charset=ISO-8859-1" language="java" <%@ page contentType="text/html; charset=ISO-8859-1" language="java"
errorPage=""%> errorPage=""%>
<%@page import="org.owasp.webgoat.session.WebSession"%> <%@page import="org.owasp.webgoat.session.WebSession"%>
<% WebSession webSession = ((WebSession)session.getAttribute("websession")); %> <%
WebSession webSession = ((WebSession) session.getAttribute("websession"));
%>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml"> <html xmlns="http://www.w3.org/1999/xhtml">
<head> <head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" /> <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />
<title>WebGoat V5.1</title> <title>WebGoat V5.1</title>
<link rel="stylesheet" href="css/webgoat_challenge.css" type="text/css" /> <link rel="stylesheet" href="css/webgoat.css" type="text/css" />
</head> </head>
<body> <body>
<div id="wrap_ch"> <div id="wrap">
<div id="top_ch"><img src="images/header/header.jpg" width="500" height="86" /></div> <div id="top"></div>
<div id="start_ch"> <div id="start">
<p>Thank you for using WebGoat!</p> <p>Thank you for using WebGoat!</p>
<p>This program is a demonstration of common web application flaws. <p>This program is a demonstration of common web application flaws.
The exercises are intended to provide hands on experience with application The exercises are intended to provide hands on experience with
penetration testing techniques. </p><p>The WebGoat project is lead by Bruce Mayhew. Please send all application penetration testing techniques. </p><p>The WebGoat project is lead
comments to Bruce at <%= webSession.getWebgoatContext().getFeedbackAddress() %>.</p> by Bruce Mayhew. Please send all comments to Bruce at <%=webSession.getWebgoatContext().getFeedbackAddress()%>.</p>
<div id="team_ch"> <div id="team">
<table border="0" align="center" class="lessonText"> <table border="0" align="center" class="lessonText">
<tr> <tr>
<td width="50%"><div align="center"><a href="http://www.owasp.org"><img border="0" src="images/logos/owasp.jpg" alt="OWASP Foundation" longdesc="http://www.owasp.org" /></a></div></td> <td width="50%">
<td width="50%"><div align="center"><a href="http://www.aspectsecurity.com"><img border="0" src="images/logos/aspect.jpg" alt="Aspect Security" longdesc="http://www.aspectsecurity.com" /></a></div></td> <div align="center"><a href="http://www.owasp.org"><img
border="0" src="images/logos/owasp.jpg" alt="OWASP Foundation"
longdesc="http://www.owasp.org" /></a></div>
</td>
<td width="50%">
<div align="center"><a href="http://www.aspectsecurity.com"><img
border="0" src="images/logos/aspect.jpg" alt="Aspect Security"
longdesc="http://www.aspectsecurity.com" /></a></div>
</td>
</tr> </tr>
<tr> <tr>
<td width="50%"><div align="center"><span class="style1"><br />WebGoat Design Team </span></div></td> <td width="50%">
<td width="50%"><div align="center"><span class="style1"><br />Lesson Contributers </span></div></td> <div align="center"><span class="style1"><br />
WebGoat Design Team </span></div>
</td>
<td width="50%">
<div align="center"><span class="style1"><br />
Lesson Contributers </span></div>
</td>
</tr> </tr>
<tr> <tr>
<td valign="top"> <td valign="top">
<div align="center" class="style2">Bruce Mayhew</div> <div align="center" class="style2">Bruce Mayhew</div>
<div align="center" class="style2">Laurence Casey</div>
<div align="center" class="style2">David Anderson</div> <div align="center" class="style2">David Anderson</div>
<div align="center" class="style2">Eric Sheridan</div>
<div align="center" class="style2">Rogan Dawes</div> <div align="center" class="style2">Rogan Dawes</div>
<div align="center" class="style2">Laurence Casey (Graphics)</div>
</td> </td>
<td valign="top"> <td valign="top">
<div align="center" class="style2">Aspect Security</div> <div align="center" class="style2">Aspect Security</div>
<div align="center" class="style2">Sherif Koussa</div> <div align="center" class="style2">Sherif Koussa</div>
<div align="center" class="style2">Alex Smolen</div> <div align="center" class="style2">Romain Brechet</div>
<div align="center" class="style2">Chuck Willis</div> <div align="center" class="style2"></div>
</td> </td>
</tr> </tr>
<tr> <tr>
<td height="25" valign="bottom"><div align="center"><span class="style1">Special Thanks for V5</span></div></td> <td height="25" valign="bottom">
<td height="25" valign="bottom"><div align="center"><span class="style1">Documentation Contributers</span></div></td> <div align="center"><span class="style1">Special Thanks
</tr> for V5.1</span></div>
<tr>
<td><div align="center" class="style2">Sherif Koussa<br />
(http://www.macadamian.com)<br /> </div>
</td> </td>
<td><div align="center" class="style2">Robert Sullivan<br /> <td height="25" valign="bottom">
(http://www.unitedhealthgroup.com/) </div> <div align="center"><span class="style1">Documentation
Contributers</span></div>
</td> </td>
</tr> </tr>
<tr> <tr>
<td><div align="center" class="style2">OWASP Autumn of Code<br /> <td>
(http://www.owasp.org/) </div></td> <div align="center" class="style2">OWASP Spring of Code</div>
<td><div align="center" class="style2">Sherif Koussa<br />(http://www.macadamian.com)<br /></div> <div align="center" class="style2">Erwin Geirnaert<br />
(http://www.zionsecurity.com)<br />
</div>
</td>
<td>
<div align="center" class="style2">Sherif Koussa<br />
(http://www.macadamian.com)<br />
</div>
<div align="center" class="style2">Erwin Geirnaert<br />
(http://www.zionsecurity.com/)</div>
</td> </td>
</tr> </tr>
<tr> <tr>
<td><div align="center" class="style2">To all who have sent comments</div></td> <td>
</tr> <div align="center" class="style2">To all who have sent comments</div>
<tr> </td>
<td><div align="center" class="style2">&nbsp;</div></td>
</tr> </tr>
<tr> <tr>
<td colspan="2"> <td colspan="2">
<div align="center" class="style2"> <div align="center" class="style2">
<form id="form" name="form" method="post" action="attack"> <form id="form" name="form" method="post" action="attack"><input
<input type="submit" name="start" value="Start WebGoat" /> type="submit" name="start" value="Start WebGoat" /></form>
</form>
</div> </div>
</td> </td>
</tr> </tr>
<tr>
<td>
<div align="center" class="style2">&nbsp;</div>
</td>
</tr>
</table> </table>
</div> </div>
</div> </div>
<div id="warning_ch"> WARNING<br /> <div align="center" class="style2">&nbsp;</div>
While running this program, your machine is extremely vulnerable to attack. <div align="center" class="style2">&nbsp;</div>
You should disconnect from the network while using this program. <div align="center" class="style2">&nbsp;</div>
<div id="warning">WARNING<br />
While running this program, your machine is extremely vulnerable to
attack. You should disconnect from the network while using this program.
<br /> <br />
<br /> <br />
This program is for educational purposes only. This program is for educational purposes only. Use of these techniques
Use of these techniques without permission could lead to without permission could lead to job termination, financial liability,
job termination, financial liability, and/or criminal penalties. and/or criminal penalties.</div>
</div>
</div> </div>
</body> </body>
</html> </html>