diff --git a/main/project/JavaSource/org/owasp/webgoat/lessons/SQLInjection/SQLInjection.java b/main/project/JavaSource/org/owasp/webgoat/lessons/SQLInjection/SQLInjection.java index ff5dcca1d..3e35123ac 100644 --- a/main/project/JavaSource/org/owasp/webgoat/lessons/SQLInjection/SQLInjection.java +++ b/main/project/JavaSource/org/owasp/webgoat/lessons/SQLInjection/SQLInjection.java @@ -265,7 +265,6 @@ public class SQLInjection extends GoatHillsFinancial } public String getLessonSolutionFileName(WebSession s) { - System.out.println("SOLUTION!!!"); String solutionFileName = null; String stage = getStage(s); solutionFileName = "/lesson_solutions/Lab SQL Injection/Lab " + stage + ".html"; diff --git a/main/project/WebContent/lesson_solutions/ClientSideFiltering.html b/main/project/WebContent/lesson_solutions/ClientSideFiltering.html index b8d320d97..cd3cde05c 100644 --- a/main/project/WebContent/lesson_solutions/ClientSideFiltering.html +++ b/main/project/WebContent/lesson_solutions/ClientSideFiltering.html @@ -35,10 +35,10 @@ First use any person from the list and see what you get. After doing this you can search for a specific person in Firebug. Make sure you find the hidden table with the information, including the salary and so on. In the same table you will find Neville. -
Now write the salary into the text edit box and submit your answer!
diff --git a/main/project/WebContent/lesson_solutions/ClientSideValidation.html b/main/project/WebContent/lesson_solutions/ClientSideValidation.html index 6d0e354ad..5885088a4 100644 --- a/main/project/WebContent/lesson_solutions/ClientSideValidation.html +++ b/main/project/WebContent/lesson_solutions/ClientSideValidation.html @@ -38,10 +38,11 @@ Now enter a character in the coupon code field. The Javascript gets executed but stops at the breakpoint. On the right side you see the parameters and there values. Now use the step over symbol or F10. Now you can read the clear text of decrypted: -Now that you know the coupon name enter it in the coupon field, purchase something and you are done. diff --git a/main/project/WebContent/lesson_solutions/InsecureLogin.html b/main/project/WebContent/lesson_solutions/InsecureLogin.html index 94521d640..513495659 100644 --- a/main/project/WebContent/lesson_solutions/InsecureLogin.html +++ b/main/project/WebContent/lesson_solutions/InsecureLogin.html @@ -33,7 +33,7 @@ to the Tomcat Setup in the Introduction section.
is free: Wireshark. Make sure you are capturing on the right interface. Click on the submit button ans stop the capturing. Now analyze the captured data. -Log in as Tom with tom as password. Click on Tom's name in the list and make sure -webscarab will intercept the next request. Change the employee_id for example to 101. -