diff --git a/ webgoat/main/build.xml b/ webgoat/main/build.xml
index ad7cc6be2..cc7cfe41e 100644
--- a/ webgoat/main/build.xml
+++ b/ webgoat/main/build.xml
@@ -56,7 +56,7 @@
-
+
@@ -293,7 +293,7 @@
@@ -312,7 +312,7 @@
diff --git a/ webgoat/main/project/build.xml b/ webgoat/main/project/build.xml
index 8378ec65c..91914e029 100644
--- a/ webgoat/main/project/build.xml
+++ b/ webgoat/main/project/build.xml
@@ -74,7 +74,7 @@
-
+
diff --git a/ webgoat/main/readme.txt b/ webgoat/main/readme.txt
index 18c37a018..c3a73c1cd 100644
--- a/ webgoat/main/readme.txt
+++ b/ webgoat/main/readme.txt
@@ -1,5 +1,5 @@
-********** WebGoat 5.0
-********** 03.09.2007
+********** WebGoat 5.1_RC2
+********** 10.09.2007
**********
**
** Source Code: http://code.google.com/p/webgoat
@@ -7,7 +7,7 @@
** Download: http://code.google.com/p/webgoat/downloads/list (Does not have Windows release)
** User Guide: http://www.owasp.org/index.php/WebGoat_User_and_Install_Guide_Table_of_Contents
** Home Page: http://www.owasp.org/index.php/Category:OWASP_WebGoat_Project
-** Contact Info: webgoat@g2-inc.com
+** Contact Info: webgoat@owasp.org
**
**********
@@ -35,23 +35,18 @@ http://code.google.com/p/webgoat
CREDITS (Latest release)
- Bruce Mayhew (http://www.g2-inc.com)
- Sherif Koussa (http://www.macadamian.com)
+ Bruce Mayhew (http://www.ouncelabs.com)
Rogan Dawes (http://dawes.za.net/rogan)
Eric Sheridan (http://www.aspectsecurity.com)
- Carlo Pelliccioni
+ Erwin Geirnaert (http://www.zionsecurity.com)
The many people who have sent comments and suggestions...
WHAT'S NEW
* WebGoat is now current at Google code. (http://code.google.com/p/webgoat)
- * HTTP Splitting
- * Cross-Site Request Forgery
- * XPATH Injection
- * AJAX Security
- * Log Spoofing
- * Cache Poisoning
- * Back Doors via SQL Injection
+ * Database Lessons
+ * XSS Phishing
+ * Lesson Solutions
* Many upgrades and minor fixes
INSTALLATION
@@ -66,10 +61,13 @@ Windows - (Download, Extract, Double Click Release)
4. login in as: user = guest, password = guest
5. To stop WebGoat, simply close the window you launched it from.
-Note: When intercepting request with IE7. You must add a '.' to the
- end of localhost. i.e.
+Note: When intercepting requests via a proxy with IE7. You must add a '.' to the
+ end of localhost. This is only valid for IE7:
http://localhost./WebGoat/attack or
http://localhost.8080/WebGoat/attack if using a non standard port
+ all other browsers should use:
+ http://localhost/WebGoat/attack
+
Linux