From 7daaac9a3f45889e34d1af3a00b28da49c53ed33 Mon Sep 17 00:00:00 2001 From: Tobias-Melzer Date: Tue, 18 Dec 2018 13:49:18 +0100 Subject: [PATCH] Fixed Typos --- .../lessonPlans/en/ChromeDevTools_Assignment.adoc | 2 +- .../en/ChromeDevTools_Assignment_Network.adoc | 4 ++-- .../lessonPlans/en/ChromeDevTools_console.adoc | 14 +++++++------- .../lessonPlans/en/ChromeDevTools_elements.adoc | 6 +++--- .../lessonPlans/en/ChromeDevTools_intro.adoc | 6 +++--- .../lessonPlans/en/ChromeDevTools_sources.adoc | 4 ++-- .../en/PasswordReset_SecurityQuestions.adoc | 8 ++++---- .../en/SqlInjection_introduction_content11.adoc | 2 +- 8 files changed, 23 insertions(+), 23 deletions(-) diff --git a/webgoat-lessons/chrome-dev-tools/src/main/resources/lessonPlans/en/ChromeDevTools_Assignment.adoc b/webgoat-lessons/chrome-dev-tools/src/main/resources/lessonPlans/en/ChromeDevTools_Assignment.adoc index 405a8e5ec..42b258ed8 100644 --- a/webgoat-lessons/chrome-dev-tools/src/main/resources/lessonPlans/en/ChromeDevTools_Assignment.adoc +++ b/webgoat-lessons/chrome-dev-tools/src/main/resources/lessonPlans/en/ChromeDevTools_Assignment.adoc @@ -1,6 +1,6 @@ == Try It! Using the Console -Let's try it. Use the console in the dev tools and call the javascript function *webgoat.customjs.phoneHome*. + +Let's try it. Use the console in the dev tools and call the javascript function *webgoat.customjs.phoneHome()*. + You should get a response in the console. Your result should look something like: `phone home said {"lessonCompleted:true, ... ,"output":"phone home response is..."` diff --git a/webgoat-lessons/chrome-dev-tools/src/main/resources/lessonPlans/en/ChromeDevTools_Assignment_Network.adoc b/webgoat-lessons/chrome-dev-tools/src/main/resources/lessonPlans/en/ChromeDevTools_Assignment_Network.adoc index a69677473..7228ca1d1 100644 --- a/webgoat-lessons/chrome-dev-tools/src/main/resources/lessonPlans/en/ChromeDevTools_Assignment_Network.adoc +++ b/webgoat-lessons/chrome-dev-tools/src/main/resources/lessonPlans/en/ChromeDevTools_Assignment_Network.adoc @@ -1,6 +1,6 @@ -== Try It! Working with the Newtork Tab +== Try It! Working with the Network Tab In this Assignment you need to find a specific HTTP request and read a randomized number from it. -To start click the first button, to generate an HTTP Request. Try to find this specific HTTP request. +To start click the first button, this wil generate an HTTP Request. Try to find the specific HTTP request. The request should contain a field: `magic_num:` Copy the number which is displayed afterwards, into the input field below and click on the check button. \ No newline at end of file diff --git a/webgoat-lessons/chrome-dev-tools/src/main/resources/lessonPlans/en/ChromeDevTools_console.adoc b/webgoat-lessons/chrome-dev-tools/src/main/resources/lessonPlans/en/ChromeDevTools_console.adoc index 8899584ff..ad3a1ecc3 100644 --- a/webgoat-lessons/chrome-dev-tools/src/main/resources/lessonPlans/en/ChromeDevTools_console.adoc +++ b/webgoat-lessons/chrome-dev-tools/src/main/resources/lessonPlans/en/ChromeDevTools_console.adoc @@ -2,16 +2,16 @@ In the console tab you can see anything, which a loaded JavaScript file may have printed out to it. Don't worry if you see something in red. While that is an error, it has probably resolved itself. -Through the Console Tab, it is also possible for you to run your own line of javascript code. +Through the console tab, it is also possible for you to run your own line of javascript code. -Start by clearing console using the shortcut CTRL+L. +Start by clearing console using the shortcut `CTRL+L`. -To run your own JavaScript. Simply click inside of the console, write something like: -`console.log("Hello WebGoat!");` and hit enter. Hello WebGoat should now appear in your console. -You can also do some basic arithmetic, with the console. If you type for example `1+3` and hit +To run your own JavaScript, simply click inside of the console and write something like: +`console.log("Hello WebGoat!");` Hit enter. Hello WebGoat should now appear in your console. +The console also allows you to do some basic arithmetic. If you type for example `1+3` and hit enter the console should display 4. -Note: The `undefined` that may also appear in the console if you hit enter. You can safely ignore this Statement, -it does only mean, that the JavaScript function you have called did not return anything, therefor `undefined`. +Note: You may see an `undefined` in the console. You can safely ignore this statement, +it only means, that the JavaScript function you have called did not return anything, therefor `undefined`. image::images/ChromeDev_Console_Ex.jpg[DeveloperToolsConsoleExample,500,500,style="lesson-image"] \ No newline at end of file diff --git a/webgoat-lessons/chrome-dev-tools/src/main/resources/lessonPlans/en/ChromeDevTools_elements.adoc b/webgoat-lessons/chrome-dev-tools/src/main/resources/lessonPlans/en/ChromeDevTools_elements.adoc index 5a61a76d2..30bf27e78 100644 --- a/webgoat-lessons/chrome-dev-tools/src/main/resources/lessonPlans/en/ChromeDevTools_elements.adoc +++ b/webgoat-lessons/chrome-dev-tools/src/main/resources/lessonPlans/en/ChromeDevTools_elements.adoc @@ -1,12 +1,12 @@ == The Elements Tab -The Elements Tab allows you to look at the HTML and CSS code, that are used to define and style the Website. +The elements tab allows you to look at the HTML and CSS code, that are used to define and style the Website. === HTML Source -If you hover over one line you can see a part of the website turns blue. That means that +If you hover over one line you can see that a part of the website turns blue. That means that this particular HTML line defines this section of the Website. -The Elements tab allows you to make changes to every single HTML element. For example if you click inside +The elements tab allows you to make changes to every single HTML element. For example if you click inside a Paragraph (

...

) Tag you can edit the content of the website. If you have made your changes and then click enter Chrome will actually update the website to show your edits. You can also change the HTML Tag used, the classes and id's a tag has and much more. diff --git a/webgoat-lessons/chrome-dev-tools/src/main/resources/lessonPlans/en/ChromeDevTools_intro.adoc b/webgoat-lessons/chrome-dev-tools/src/main/resources/lessonPlans/en/ChromeDevTools_intro.adoc index d04e02ae6..3ce5e60fb 100644 --- a/webgoat-lessons/chrome-dev-tools/src/main/resources/lessonPlans/en/ChromeDevTools_intro.adoc +++ b/webgoat-lessons/chrome-dev-tools/src/main/resources/lessonPlans/en/ChromeDevTools_intro.adoc @@ -1,11 +1,11 @@ == Google Chrome Developer Tools To complete certain assignments you sometimes may have to look at the JavaScript -source code or run a JavaScript Command on your own. -To do that Google Chrome has a set of tools which allows to do that and much much more. +source code or run a JavaScript command on your own. +To do that Google Chrome has a set of tools which allows you to do that and much much more. While these tools are not specific to Google Chrome, almost every modern browser has a set of their own, our introduction will focus on the ones found in Google Chrome. -You can however still use the Browser of your choice, like Firefox or Safari, although some steps of this tutorial +You can however still use the browser of your choice, like Firefox or Safari, although some steps of this tutorial may be different for you. Keep in mind that the following tutorial, is not there to teach everything there is about these tools. diff --git a/webgoat-lessons/chrome-dev-tools/src/main/resources/lessonPlans/en/ChromeDevTools_sources.adoc b/webgoat-lessons/chrome-dev-tools/src/main/resources/lessonPlans/en/ChromeDevTools_sources.adoc index 1e93c00d4..cd0d2ba06 100644 --- a/webgoat-lessons/chrome-dev-tools/src/main/resources/lessonPlans/en/ChromeDevTools_sources.adoc +++ b/webgoat-lessons/chrome-dev-tools/src/main/resources/lessonPlans/en/ChromeDevTools_sources.adoc @@ -9,8 +9,8 @@ image::images/ChromeDev_Sources.jpg[DeveloperToolsSources,400,500,style="lesson- In the Network tab you can view HTTP requests and responses the website has performed. If you want more detailed information on a particular request, just click on it. -In the Timeline above the blue dots represent, when these requests and responses have been performed. -You can also see the Requests done in a specific time frame, simply by clicking and dragging on the timeline. Now the Window +In the Timeline above the blue dots represent when these requests and responses have been performed. +You can also see the Requests done in a specific time frame, simply by clicking and dragging on the timeline. Now the window below, will only show the requests and responses done in that particular time frame. image::images/ChromeDev_Network.jpg[DeveloperToolsNetwork,400,500,style="lesson-image"] \ No newline at end of file diff --git a/webgoat-lessons/password-reset/src/main/resources/lessonPlans/en/PasswordReset_SecurityQuestions.adoc b/webgoat-lessons/password-reset/src/main/resources/lessonPlans/en/PasswordReset_SecurityQuestions.adoc index 29f4483dd..ba5981da4 100644 --- a/webgoat-lessons/password-reset/src/main/resources/lessonPlans/en/PasswordReset_SecurityQuestions.adoc +++ b/webgoat-lessons/password-reset/src/main/resources/lessonPlans/en/PasswordReset_SecurityQuestions.adoc @@ -1,16 +1,16 @@ == The Problem with Security Questions -While Security Questions my at first seem like a good way for authentication of a user, they +While Security Questions my at first seem like a good way to do authentication, they have some big problems. -The "perfect" Security Question should be hard to crack, but easy to remember. Also the answer needs to fixed, -so the answer must not be subject to change. +The "perfect" security question should be hard to crack, but easy to remember. Also the answer needs to fixed, +so it must not be subject to change. There are only a handful of questions which satisfy these criteria and practically none which apply to anybody. If you have to pick a security question, we recommend not answering them truthfully. -To further elaborate on the matter, there is a small assignment for you: There is a list of some common security questions. +To further elaborate on the matter, there is a small assignment for you: There is a list of some common security questions down below. if you choose one, it will show to you why the question you picked is not really as good as one may think. When you have looked at two questions the assignment will be marked as complete. \ No newline at end of file diff --git a/webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_introduction_content11.adoc b/webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_introduction_content11.adoc index a73fdc660..3c22d33b2 100644 --- a/webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_introduction_content11.adoc +++ b/webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_introduction_content11.adoc @@ -1,6 +1,6 @@ == Try It! String SQL Injection -The query in the code builds a dynamic query as seen in the previous example. The query in the code builds a dynamic query by concatenating strings making it susceptible to String SQL injection: +The query in the code builds a dynamic query as seen in the previous example. The query is build by concatenating strings making it susceptible to String SQL injection: ------------------------------------------------------------ "select * from users where LOGIN_COUNT > 0 and FIRST_NAME = ‘" + userName + "'";