dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge tag 'v8.0.0.M22' into develop

Browse Source 
v8.0.0.M22
This commit is contained in:
Nanne Baars
2019-01-18 08:39:19 +01:00
parent b0e3a06b50 7b8e3cdb52
commit 5d5ba53473
27 changed files with 29 additions and 29 deletions
pom.xml
webgoat-container
pom.xml
webgoat-lessons
auth-bypass
pom.xml
bypass-restrictions
pom.xml
challenge
pom.xml
client-side-filtering
pom.xml
cross-site-scripting
pom.xml
csrf
pom.xml
html-tampering
pom.xml
http-basics
pom.xml
http-proxies
pom.xml
idor
pom.xml
insecure-deserialization
pom.xml
insecure-login
pom.xml
jwt
pom.xml
missing-function-ac
pom.xml
password-reset
pom.xml
pom.xml
sql-injection
pom.xml
src
main
java
org
owasp
webgoat
plugin
mitigation
SqlInjectionLesson12a.java
resources
lessonPlans
en
SqlInjection_content9.adoc
vulnerable-components
pom.xml
webgoat-introduction
pom.xml
webwolf-introduction
pom.xml
xxe
pom.xml
webgoat-server
pom.xml
webwolf
pom.xml

2
pom.xml

@ -6,7 +6,7 @@
<groupId>org.owasp.webgoat</groupId>
<artifactId>webgoat-parent</artifactId>
<packaging>pom</packaging>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
<name>WebGoat Parent Pom</name>
<description>Parent Pom for the WebGoat Project. A deliberately insecure Web Application</description>

2
webgoat-container/pom.xml

@ -10,7 +10,7 @@
<parent>
<groupId>org.owasp.webgoat</groupId>
<artifactId>webgoat-parent</artifactId>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
</parent>
<profiles>

2
webgoat-lessons/auth-bypass/pom.xml

@ -6,7 +6,7 @@
<parent>
<groupId>org.owasp.webgoat.lesson</groupId>
<artifactId>webgoat-lessons-parent</artifactId>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
</parent>
</project>

2
webgoat-lessons/bypass-restrictions/pom.xml

@ -6,6 +6,6 @@
<parent>
<groupId>org.owasp.webgoat.lesson</groupId>
<artifactId>webgoat-lessons-parent</artifactId>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
</parent>
</project>

2
webgoat-lessons/challenge/pom.xml

@ -6,7 +6,7 @@
<parent>
<groupId>org.owasp.webgoat.lesson</groupId>
<artifactId>webgoat-lessons-parent</artifactId>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
</parent>

2
webgoat-lessons/client-side-filtering/pom.xml

@ -6,7 +6,7 @@
<parent>
<groupId>org.owasp.webgoat.lesson</groupId>
<artifactId>webgoat-lessons-parent</artifactId>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
</parent>
</project>

2
webgoat-lessons/cross-site-scripting/pom.xml

@ -6,7 +6,7 @@
<parent>
<groupId>org.owasp.webgoat.lesson</groupId>
<artifactId>webgoat-lessons-parent</artifactId>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
</parent>
<build>
<plugins>

2
webgoat-lessons/csrf/pom.xml

@ -6,6 +6,6 @@
<parent>
<groupId>org.owasp.webgoat.lesson</groupId>
<artifactId>webgoat-lessons-parent</artifactId>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
</parent>
</project>

2
webgoat-lessons/html-tampering/pom.xml

@ -6,7 +6,7 @@
<parent>
<groupId>org.owasp.webgoat.lesson</groupId>
<artifactId>webgoat-lessons-parent</artifactId>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
</parent>
<dependencies>

2
webgoat-lessons/http-basics/pom.xml

@ -6,7 +6,7 @@
<parent>
<groupId>org.owasp.webgoat.lesson</groupId>
<artifactId>webgoat-lessons-parent</artifactId>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
</parent>
</project>

2
webgoat-lessons/http-proxies/pom.xml

@ -6,7 +6,7 @@
<parent>
<groupId>org.owasp.webgoat.lesson</groupId>
<artifactId>webgoat-lessons-parent</artifactId>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
</parent>
<dependencies>

2
webgoat-lessons/idor/pom.xml

@ -6,7 +6,7 @@
<parent>
<groupId>org.owasp.webgoat.lesson</groupId>
<artifactId>webgoat-lessons-parent</artifactId>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
</parent>
</project>

2
webgoat-lessons/insecure-deserialization/pom.xml

@ -6,7 +6,7 @@
<parent>
<groupId>org.owasp.webgoat.lesson</groupId>
<artifactId>webgoat-lessons-parent</artifactId>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
</parent>
<dependencies>

2
webgoat-lessons/insecure-login/pom.xml

@ -6,7 +6,7 @@
<parent>
<groupId>org.owasp.webgoat.lesson</groupId>
<artifactId>webgoat-lessons-parent</artifactId>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
</parent>
<dependencies>

2
webgoat-lessons/jwt/pom.xml

@ -6,7 +6,7 @@
<parent>
<groupId>org.owasp.webgoat.lesson</groupId>
<artifactId>webgoat-lessons-parent</artifactId>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
</parent>
<dependencies>

2
webgoat-lessons/missing-function-ac/pom.xml

@ -6,7 +6,7 @@
<parent>
<groupId>org.owasp.webgoat.lesson</groupId>
<artifactId>webgoat-lessons-parent</artifactId>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
</parent>
</project>

2
webgoat-lessons/password-reset/pom.xml

@ -6,7 +6,7 @@
<parent>
<groupId>org.owasp.webgoat.lesson</groupId>
<artifactId>webgoat-lessons-parent</artifactId>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
</parent>
<dependencies>

4
webgoat-lessons/pom.xml

@ -5,12 +5,12 @@
<groupId>org.owasp.webgoat.lesson</groupId>
<artifactId>webgoat-lessons-parent</artifactId>
<packaging>pom</packaging>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
<parent>
<groupId>org.owasp.webgoat</groupId>
<artifactId>webgoat-parent</artifactId>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
</parent>
<modules>

2
webgoat-lessons/sql-injection/pom.xml

@ -6,6 +6,6 @@
<parent>
<groupId>org.owasp.webgoat.lesson</groupId>
<artifactId>webgoat-lessons-parent</artifactId>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
</parent>
</project>

2
webgoat-lessons/sql-injection/src/main/java/org/owasp/webgoat/plugin/mitigation/SqlInjectionLesson12a.java

@ -33,7 +33,7 @@ public class SqlInjectionLesson12a extends AssignmentEndpoint {
@SneakyThrows
public AttackResult completed(@RequestParam String ip) {
Connection connection = DatabaseUtilities.getConnection(webSession);
PreparedStatement preparedStatement = connection.prepareStatement("select ip from servers where ip = ?");
PreparedStatement preparedStatement = connection.prepareStatement("select ip from servers where hostname = 'webgoat-prd' and ip = ?");
preparedStatement.setString(1, ip);
ResultSet resultSet = preparedStatement.executeQuery();
if (resultSet.next()) {

2
webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_content9.adoc

@ -11,7 +11,7 @@ PreparedStatement ps = null;
RecordSet rs = null;
try {
pUserName = request.getParameter("UserName");
if ( isUsernameValid (pUsername);
if ( isUsernameValid (pUsername) ) {
ps = conn.prepareStatement("SELECT * FROM user_table
WHERE username = ? ");
ps.setString(1, pUsername);

2
webgoat-lessons/vulnerable-components/pom.xml

@ -6,7 +6,7 @@
<parent>
<groupId>org.owasp.webgoat.lesson</groupId>
<artifactId>webgoat-lessons-parent</artifactId>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
</parent>
<dependencies>
<dependency>

2
webgoat-lessons/webgoat-introduction/pom.xml

@ -6,6 +6,6 @@
<parent>
<groupId>org.owasp.webgoat.lesson</groupId>
<artifactId>webgoat-lessons-parent</artifactId>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
</parent>
</project>

2
webgoat-lessons/webwolf-introduction/pom.xml

@ -6,6 +6,6 @@
<parent>
<groupId>org.owasp.webgoat.lesson</groupId>
<artifactId>webgoat-lessons-parent</artifactId>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
</parent>
</project>

2
webgoat-lessons/xxe/pom.xml

@ -6,7 +6,7 @@
<parent>
<groupId>org.owasp.webgoat.lesson</groupId>
<artifactId>webgoat-lessons-parent</artifactId>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
</parent>
<dependencies>

2
webgoat-server/pom.xml

@ -6,7 +6,7 @@
<parent>
<groupId>org.owasp.webgoat</groupId>
<artifactId>webgoat-parent</artifactId>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
</parent>
<properties>

2
webwolf/pom.xml

@ -6,7 +6,7 @@
<parent>
<groupId>org.owasp.webgoat</groupId>
<artifactId>webgoat-parent</artifactId>
<version>v8.0.0-SNAPSHOT</version>
<version>v8.0.0.M22</version>
</parent>
<dependencies>