dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Function AC Lesson 1: Spelling and grammar fixes.

Browse Source
This commit is contained in:
Elie De Brauwer 2020-05-24 13:00:00 +02:00 committed by Nanne Baars
parent 6c83457231
commit 9576c6b9da
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
webgoat-lessons/missing-function-ac/src/main/resources/lessonPlans/en/missing-function-ac-02-client-controls.adoc
View File

@ -1,7 +1,7 @@
== Relying on Obscurity == Relying on Obscurity
If you are relying on HTML, CSS or javascript to hide links that users don't normally access. One could rely on HTML, CSS or javascript to hide links that users don't normally access.
It's a little older, but there was a case of a network router trying to protect (hide) admin functions with javascript in the UI https://www.wired.com/2009/10/routers-still-vulnerable In the past there has been a case where a network router tried to protect (hide) admin functionality with javascript in the UI: https://www.wired.com/2009/10/routers-still-vulnerable.
=== Finding Hidden Items === Finding Hidden Items
@ -9,8 +9,8 @@ There are usually hints to finding functionality the UI does not openly expose i
* HTML or javascript comments * HTML or javascript comments
* Commented out elements * Commented out elements
* Items hidden via css controls/classes * Items hidden via CSS controls/classes
=== Your Mission === Your Mission
Find two menu items not visible in menu below that are or would be of interest to an attacker/malicious user and put the labels for those menu items (there are no links right now in the menus). Find two invisible menu items in the menu below that are, or would be, of interest to an attacker/malicious user and submit the labels for those menu items (there are no links right now in the menus).