dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Challenge jsp is supposed to be a clone of the webgoat.jsp

Browse Source 
git-svn-id: http://webgoat.googlecode.com/svn/trunk@266 4033779f-a91e-0410-96ef-6bf7bf53c507
This commit is contained in:
mayhew64 2008-01-10 13:48:42 +00:00
parent ef79edca0a
commit 36ca8e5598
1 changed files with 110 additions and 84 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

192
webgoat/main/project/WebContent/webgoat_challenge.jsp
View File

@ -1,98 +1,124 @@
<%@ page contentType="text/html; charset=ISO-8859-1" language="java" <%@ page contentType="text/html; charset=ISO-8859-1" language="java"
errorPage="" %> errorPage=""%>
<%@page import="org.owasp.webgoat.session.WebSession"%> <%@page import="org.owasp.webgoat.session.WebSession"%>
<% WebSession webSession = ((WebSession)session.getAttribute("websession")); %> <%
WebSession webSession = ((WebSession) session.getAttribute("websession"));
%>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml"> <html xmlns="http://www.w3.org/1999/xhtml">
<head> <head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" /> <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />
<title>WebGoat V5.1</title> <title>WebGoat V5.1</title>
<link rel="stylesheet" href="css/webgoat_challenge.css" type="text/css" /> <link rel="stylesheet" href="css/webgoat.css" type="text/css" />
</head> </head>
<body> <body>
<div id="wrap_ch"> <div id="wrap">
<div id="top_ch"><img src="images/header/header.jpg" width="500" height="86" /></div> <div id="top"></div>
<div id="start_ch"> <div id="start">
<p>Thank you for using WebGoat!</p> <p>Thank you for using WebGoat!</p>
<p>This program is a demonstration of common web application flaws. <p>This program is a demonstration of common web application flaws.
The exercises are intended to provide hands on experience with application The exercises are intended to provide hands on experience with
penetration testing techniques. </p><p>The WebGoat project is lead by Bruce Mayhew. Please send all application penetration testing techniques. </p><p>The WebGoat project is lead
comments to Bruce at <%= webSession.getWebgoatContext().getFeedbackAddress() %>.</p> by Bruce Mayhew. Please send all comments to Bruce at <%=webSession.getWebgoatContext().getFeedbackAddress()%>.</p>
<div id="team_ch"> <div id="team">
<table border="0" align="center" class="lessonText"> <table border="0" align="center" class="lessonText">
<tr> <tr>
<td width="50%"><div align="center"><a href="http://www.owasp.org"><img border="0" src="images/logos/owasp.jpg" alt="OWASP Foundation" longdesc="http://www.owasp.org" /></a></div></td> <td width="50%">
<td width="50%"><div align="center"><a href="http://www.aspectsecurity.com"><img border="0" src="images/logos/aspect.jpg" alt="Aspect Security" longdesc="http://www.aspectsecurity.com" /></a></div></td> <div align="center"><a href="http://www.owasp.org"><img
</tr> border="0" src="images/logos/owasp.jpg" alt="OWASP Foundation"
<tr> longdesc="http://www.owasp.org" /></a></div>
<td width="50%"><div align="center"><span class="style1"><br />WebGoat Design Team </span></div></td> </td>
<td width="50%"><div align="center"><span class="style1"><br />Lesson Contributers </span></div></td> <td width="50%">
</tr> <div align="center"><a href="http://www.aspectsecurity.com"><img
<tr> border="0" src="images/logos/aspect.jpg" alt="Aspect Security"
<td valign="top"> longdesc="http://www.aspectsecurity.com" /></a></div>
<div align="center" class="style2">Bruce Mayhew</div> </td>
<div align="center" class="style2">Laurence Casey</div> </tr>
<div align="center" class="style2">David Anderson</div> <tr>
<div align="center" class="style2">Eric Sheridan</div> <td width="50%">
<div align="center" class="style2">Rogan Dawes</div> <div align="center"><span class="style1"><br />
</td> WebGoat Design Team </span></div>
<td valign="top"> </td>
<div align="center" class="style2">Aspect Security</div> <td width="50%">
<div align="center" class="style2">Sherif Koussa</div> <div align="center"><span class="style1"><br />
<div align="center" class="style2">Alex Smolen</div> Lesson Contributers </span></div>
<div align="center" class="style2">Chuck Willis</div> </td>
</tr>
<tr>
<td valign="top">
<div align="center" class="style2">Bruce Mayhew</div>
<div align="center" class="style2">David Anderson</div>
<div align="center" class="style2">Rogan Dawes</div>
<div align="center" class="style2">Laurence Casey (Graphics)</div>
</td>
<td valign="top">
<div align="center" class="style2">Aspect Security</div>
<div align="center" class="style2">Sherif Koussa</div>
<div align="center" class="style2">Romain Brechet</div>
<div align="center" class="style2"></div>
</td> </td>
</tr> </tr>
<tr> <tr>
<td height="25" valign="bottom"><div align="center"><span class="style1">Special Thanks for V5</span></div></td> <td height="25" valign="bottom">
<td height="25" valign="bottom"><div align="center"><span class="style1">Documentation Contributers</span></div></td> <div align="center"><span class="style1">Special Thanks
</tr> for V5.1</span></div>
<tr> </td>
<td><div align="center" class="style2">Sherif Koussa<br /> <td height="25" valign="bottom">
(http://www.macadamian.com)<br /> </div> <div align="center"><span class="style1">Documentation
</td> Contributers</span></div>
<td><div align="center" class="style2">Robert Sullivan<br /> </td>
(http://www.unitedhealthgroup.com/) </div> </tr>
</td> <tr>
</tr> <td>
<tr> <div align="center" class="style2">OWASP Spring of Code</div>
<td><div align="center" class="style2">OWASP Autumn of Code<br /> <div align="center" class="style2">Erwin Geirnaert<br />
(http://www.owasp.org/) </div></td> (http://www.zionsecurity.com)<br />
<td><div align="center" class="style2">Sherif Koussa<br />(http://www.macadamian.com)<br /></div> </div>
</td> </td>
</tr> <td>
<tr> <div align="center" class="style2">Sherif Koussa<br />
<td><div align="center" class="style2">To all who have sent comments</div></td> (http://www.macadamian.com)<br />
</tr> </div>
<tr> <div align="center" class="style2">Erwin Geirnaert<br />
<td><div align="center" class="style2">&nbsp;</div></td> (http://www.zionsecurity.com/)</div>
</tr> </td>
<tr> </tr>
<td colspan = "2"> <tr>
<div align="center" class="style2"> <td>
<form id="form" name="form" method="post" action="attack"> <div align="center" class="style2">To all who have sent comments</div>
<input type="submit" name="start" value="Start WebGoat" /> </td>
</form> </tr>
</div> <tr>
</td> <td colspan="2">
</tr> <div align="center" class="style2">
</table> <form id="form" name="form" method="post" action="attack"><input
</div> type="submit" name="start" value="Start WebGoat" /></form>
</div> </div>
<div id="warning_ch"> WARNING<br /> </td>
While running this program, your machine is extremely vulnerable to attack. </tr>
You should disconnect from the network while using this program. <tr>
<br/> <td>
<br/> <div align="center" class="style2">&nbsp;</div>
This program is for educational purposes only. </td>
Use of these techniques without permission could lead to </tr>
job termination, financial liability, and/or criminal penalties. </table>
</div> </div>
</div> </div>
<div align="center" class="style2">&nbsp;</div>
<div align="center" class="style2">&nbsp;</div>
<div align="center" class="style2">&nbsp;</div>
<div id="warning">WARNING<br />
While running this program, your machine is extremely vulnerable to
attack. You should disconnect from the network while using this program.
<br />
<br />
This program is for educational purposes only. Use of these techniques
without permission could lead to job termination, financial liability,
and/or criminal penalties.</div>
</div>
</body> </body>
</html> </html>