chore: update Java version in README (#2091)
Closes: gh-2072 * chore: add Maven wrapper jar file This way we don't download it every time from a Maven repository saving some band with. * chore: remove @authors tag
This commit is contained in:
parent
9ec75d5a56
commit
ec3b9e8aaf
1
.gitignore
vendored
1
.gitignore
vendored
@ -39,7 +39,6 @@ UserDatabase.mv.db
|
|||||||
webgoat-container/src/main/webapp/users/guest.org.owasp.webgoat.plugin.*.props
|
webgoat-container/src/main/webapp/users/guest.org.owasp.webgoat.plugin.*.props
|
||||||
webgoat-container/src/main/webapp/plugin_lessons/dist-*.pom
|
webgoat-container/src/main/webapp/plugin_lessons/dist-*.pom
|
||||||
webgoat-lessons/**/target
|
webgoat-lessons/**/target
|
||||||
**/*.jar
|
|
||||||
**/.DS_Store
|
**/.DS_Store
|
||||||
webgoat-server/mongo-data/*
|
webgoat-server/mongo-data/*
|
||||||
webgoat-lessons/vulnerable-components/dependency-reduced-pom.xml
|
webgoat-lessons/vulnerable-components/dependency-reduced-pom.xml
|
||||||
|
BIN
.mvn/wrapper/maven-wrapper.jar
vendored
Normal file
BIN
.mvn/wrapper/maven-wrapper.jar
vendored
Normal file
Binary file not shown.
2
.mvn/wrapper/maven-wrapper.properties
vendored
2
.mvn/wrapper/maven-wrapper.properties
vendored
@ -1,2 +1,2 @@
|
|||||||
distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.8.1/apache-maven-3.8.1-bin.zip
|
distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.9/apache-maven-3.9.9-bin.zip
|
||||||
wrapperUrl=https://repo.maven.apache.org/maven2/io/takari/maven-wrapper/0.5.6/maven-wrapper-0.5.6.jar
|
wrapperUrl=https://repo.maven.apache.org/maven2/io/takari/maven-wrapper/0.5.6/maven-wrapper-0.5.6.jar
|
||||||
|
@ -99,7 +99,7 @@ For a full overview of all the parameters you can use, please check the [WebGoat
|
|||||||
|
|
||||||
### Prerequisites:
|
### Prerequisites:
|
||||||
|
|
||||||
* Java 17 or 21
|
* Java 23
|
||||||
* Your favorite IDE
|
* Your favorite IDE
|
||||||
* Git, or Git support in your IDE
|
* Git, or Git support in your IDE
|
||||||
|
|
||||||
|
@ -7,9 +7,6 @@ package org.owasp.webgoat.integration;
|
|||||||
import java.util.Map;
|
import java.util.Map;
|
||||||
import org.junit.jupiter.api.Test;
|
import org.junit.jupiter.api.Test;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author Angel Olle Blazquez
|
|
||||||
*/
|
|
||||||
class SessionManagementIT extends IntegrationTest {
|
class SessionManagementIT extends IntegrationTest {
|
||||||
|
|
||||||
private static final String HIJACK_LOGIN_CONTEXT_PATH = "HijackSession/login";
|
private static final String HIJACK_LOGIN_CONTEXT_PATH = "HijackSession/login";
|
||||||
|
@ -42,8 +42,6 @@ public class VulnerableTaskHolder implements Serializable {
|
|||||||
|
|
||||||
/**
|
/**
|
||||||
* Execute a task when de-serializing a saved or received object.
|
* Execute a task when de-serializing a saved or received object.
|
||||||
*
|
|
||||||
* @author stupid develop
|
|
||||||
*/
|
*/
|
||||||
private void readObject(ObjectInputStream stream) throws Exception {
|
private void readObject(ObjectInputStream stream) throws Exception {
|
||||||
// unserialize data so taskName and taskAction are available
|
// unserialize data so taskName and taskAction are available
|
||||||
|
@ -11,11 +11,6 @@ import java.io.IOException;
|
|||||||
import org.springframework.security.core.AuthenticationException;
|
import org.springframework.security.core.AuthenticationException;
|
||||||
import org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint;
|
import org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint;
|
||||||
|
|
||||||
/**
|
|
||||||
* AjaxAuthenticationEntryPoint class.
|
|
||||||
*
|
|
||||||
* @author zupzup
|
|
||||||
*/
|
|
||||||
public class AjaxAuthenticationEntryPoint extends LoginUrlAuthenticationEntryPoint {
|
public class AjaxAuthenticationEntryPoint extends LoginUrlAuthenticationEntryPoint {
|
||||||
public AjaxAuthenticationEntryPoint(String loginFormUrl) {
|
public AjaxAuthenticationEntryPoint(String loginFormUrl) {
|
||||||
super(loginFormUrl);
|
super(loginFormUrl);
|
||||||
|
@ -10,12 +10,6 @@ import org.springframework.stereotype.Controller;
|
|||||||
import org.springframework.web.bind.annotation.GetMapping;
|
import org.springframework.web.bind.annotation.GetMapping;
|
||||||
import org.springframework.web.servlet.ModelAndView;
|
import org.springframework.web.servlet.ModelAndView;
|
||||||
|
|
||||||
/**
|
|
||||||
* Welcome class.
|
|
||||||
*
|
|
||||||
* @author rlawson
|
|
||||||
* @version $Id: $Id
|
|
||||||
*/
|
|
||||||
@Controller
|
@Controller
|
||||||
public class Welcome {
|
public class Welcome {
|
||||||
|
|
||||||
|
@ -11,8 +11,6 @@ import org.springframework.context.support.ReloadableResourceBundleMessageSource
|
|||||||
/**
|
/**
|
||||||
* ExposedReloadableResourceMessageBundleSource class. Extends the reloadable message source with a
|
* ExposedReloadableResourceMessageBundleSource class. Extends the reloadable message source with a
|
||||||
* way to get all messages
|
* way to get all messages
|
||||||
*
|
|
||||||
* @author zupzup
|
|
||||||
*/
|
*/
|
||||||
@AllArgsConstructor
|
@AllArgsConstructor
|
||||||
public class Messages extends ReloadableResourceBundleMessageSource {
|
public class Messages extends ReloadableResourceBundleMessageSource {
|
||||||
|
@ -7,12 +7,6 @@ package org.owasp.webgoat.container.lessons;
|
|||||||
import lombok.AllArgsConstructor;
|
import lombok.AllArgsConstructor;
|
||||||
import lombok.Getter;
|
import lombok.Getter;
|
||||||
|
|
||||||
/**
|
|
||||||
* LessonInfoModel class.
|
|
||||||
*
|
|
||||||
* @author dm
|
|
||||||
* @version $Id: $Id
|
|
||||||
*/
|
|
||||||
@Getter
|
@Getter
|
||||||
@AllArgsConstructor
|
@AllArgsConstructor
|
||||||
public class LessonInfoModel {
|
public class LessonInfoModel {
|
||||||
|
@ -7,12 +7,6 @@ package org.owasp.webgoat.container.lessons;
|
|||||||
import java.util.ArrayList;
|
import java.util.ArrayList;
|
||||||
import java.util.List;
|
import java.util.List;
|
||||||
|
|
||||||
/**
|
|
||||||
* LessonMenuItem class.
|
|
||||||
*
|
|
||||||
* @author rlawson
|
|
||||||
* @version $Id: $Id
|
|
||||||
*/
|
|
||||||
public class LessonMenuItem {
|
public class LessonMenuItem {
|
||||||
|
|
||||||
private String name;
|
private String name;
|
||||||
|
@ -18,11 +18,6 @@ import org.springframework.web.bind.annotation.GetMapping;
|
|||||||
import org.springframework.web.bind.annotation.PathVariable;
|
import org.springframework.web.bind.annotation.PathVariable;
|
||||||
import org.springframework.web.bind.annotation.ResponseBody;
|
import org.springframework.web.bind.annotation.ResponseBody;
|
||||||
|
|
||||||
/**
|
|
||||||
* LessonProgressService class.
|
|
||||||
*
|
|
||||||
* @author webgoat
|
|
||||||
*/
|
|
||||||
@Controller
|
@Controller
|
||||||
@RequiredArgsConstructor
|
@RequiredArgsConstructor
|
||||||
public class LessonProgressService {
|
public class LessonProgressService {
|
||||||
|
@ -6,12 +6,6 @@ package org.owasp.webgoat.container.session;
|
|||||||
|
|
||||||
import java.io.Serializable;
|
import java.io.Serializable;
|
||||||
|
|
||||||
/**
|
|
||||||
* LabelDebugger class.
|
|
||||||
*
|
|
||||||
* @author dm
|
|
||||||
* @version $Id: $Id
|
|
||||||
*/
|
|
||||||
public class LabelDebugger implements Serializable {
|
public class LabelDebugger implements Serializable {
|
||||||
|
|
||||||
private boolean enabled = false;
|
private boolean enabled = false;
|
||||||
|
@ -20,10 +20,6 @@ import org.springframework.web.bind.annotation.GetMapping;
|
|||||||
import org.springframework.web.bind.annotation.ModelAttribute;
|
import org.springframework.web.bind.annotation.ModelAttribute;
|
||||||
import org.springframework.web.bind.annotation.PostMapping;
|
import org.springframework.web.bind.annotation.PostMapping;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 3/19/17.
|
|
||||||
*/
|
|
||||||
@Controller
|
@Controller
|
||||||
@RequiredArgsConstructor
|
@RequiredArgsConstructor
|
||||||
@Slf4j
|
@Slf4j
|
||||||
|
@ -10,10 +10,6 @@ import jakarta.validation.constraints.Size;
|
|||||||
import lombok.Getter;
|
import lombok.Getter;
|
||||||
import lombok.Setter;
|
import lombok.Setter;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 3/19/17.
|
|
||||||
*/
|
|
||||||
@Getter
|
@Getter
|
||||||
@Setter
|
@Setter
|
||||||
public class UserForm {
|
public class UserForm {
|
||||||
|
@ -7,10 +7,6 @@ package org.owasp.webgoat.container.users;
|
|||||||
import java.util.List;
|
import java.util.List;
|
||||||
import org.springframework.data.jpa.repository.JpaRepository;
|
import org.springframework.data.jpa.repository.JpaRepository;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 3/19/17.
|
|
||||||
*/
|
|
||||||
public interface UserRepository extends JpaRepository<WebGoatUser, String> {
|
public interface UserRepository extends JpaRepository<WebGoatUser, String> {
|
||||||
|
|
||||||
WebGoatUser findByUsername(String username);
|
WebGoatUser findByUsername(String username);
|
||||||
|
@ -14,10 +14,6 @@ import org.springframework.security.core.userdetails.UserDetailsService;
|
|||||||
import org.springframework.security.core.userdetails.UsernameNotFoundException;
|
import org.springframework.security.core.userdetails.UsernameNotFoundException;
|
||||||
import org.springframework.stereotype.Service;
|
import org.springframework.stereotype.Service;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 3/19/17.
|
|
||||||
*/
|
|
||||||
@Service
|
@Service
|
||||||
@AllArgsConstructor
|
@AllArgsConstructor
|
||||||
public class UserService implements UserDetailsService {
|
public class UserService implements UserDetailsService {
|
||||||
|
@ -10,10 +10,6 @@ import lombok.Getter;
|
|||||||
import lombok.NoArgsConstructor;
|
import lombok.NoArgsConstructor;
|
||||||
import org.springframework.data.annotation.Id;
|
import org.springframework.data.annotation.Id;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 8/15/17.
|
|
||||||
*/
|
|
||||||
@Getter
|
@Getter
|
||||||
@AllArgsConstructor
|
@AllArgsConstructor
|
||||||
@NoArgsConstructor(access = AccessLevel.PROTECTED)
|
@NoArgsConstructor(access = AccessLevel.PROTECTED)
|
||||||
|
@ -9,10 +9,6 @@ import org.springframework.stereotype.Component;
|
|||||||
import org.springframework.validation.Errors;
|
import org.springframework.validation.Errors;
|
||||||
import org.springframework.validation.Validator;
|
import org.springframework.validation.Validator;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 3/19/17.
|
|
||||||
*/
|
|
||||||
@Component
|
@Component
|
||||||
@AllArgsConstructor
|
@AllArgsConstructor
|
||||||
public class UserValidator implements Validator {
|
public class UserValidator implements Validator {
|
||||||
|
@ -15,10 +15,6 @@ import org.springframework.security.core.authority.SimpleGrantedAuthority;
|
|||||||
import org.springframework.security.core.userdetails.User;
|
import org.springframework.security.core.userdetails.User;
|
||||||
import org.springframework.security.core.userdetails.UserDetails;
|
import org.springframework.security.core.userdetails.UserDetails;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 3/19/17.
|
|
||||||
*/
|
|
||||||
@Getter
|
@Getter
|
||||||
@Entity
|
@Entity
|
||||||
public class WebGoatUser implements UserDetails {
|
public class WebGoatUser implements UserDetails {
|
||||||
|
@ -8,10 +8,6 @@ import org.owasp.webgoat.container.lessons.Category;
|
|||||||
import org.owasp.webgoat.container.lessons.Lesson;
|
import org.owasp.webgoat.container.lessons.Lesson;
|
||||||
import org.springframework.stereotype.Component;
|
import org.springframework.stereotype.Component;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 3/21/17.
|
|
||||||
*/
|
|
||||||
@Component
|
@Component
|
||||||
public class ChallengeIntro extends Lesson {
|
public class ChallengeIntro extends Lesson {
|
||||||
|
|
||||||
|
@ -9,10 +9,6 @@ import java.time.LocalDateTime;
|
|||||||
import lombok.Builder;
|
import lombok.Builder;
|
||||||
import lombok.Data;
|
import lombok.Data;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 8/20/17.
|
|
||||||
*/
|
|
||||||
@Builder
|
@Builder
|
||||||
@Data
|
@Data
|
||||||
public class Email implements Serializable {
|
public class Email implements Serializable {
|
||||||
|
@ -8,10 +8,6 @@ import org.owasp.webgoat.container.lessons.Category;
|
|||||||
import org.owasp.webgoat.container.lessons.Lesson;
|
import org.owasp.webgoat.container.lessons.Lesson;
|
||||||
import org.springframework.stereotype.Component;
|
import org.springframework.stereotype.Component;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 3/21/17.
|
|
||||||
*/
|
|
||||||
@Component
|
@Component
|
||||||
public class Challenge1 extends Lesson {
|
public class Challenge1 extends Lesson {
|
||||||
|
|
||||||
|
@ -8,10 +8,6 @@ import org.owasp.webgoat.container.lessons.Category;
|
|||||||
import org.owasp.webgoat.container.lessons.Lesson;
|
import org.owasp.webgoat.container.lessons.Lesson;
|
||||||
import org.springframework.stereotype.Component;
|
import org.springframework.stereotype.Component;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 3/21/17.
|
|
||||||
*/
|
|
||||||
@Component
|
@Component
|
||||||
public class Challenge5 extends Lesson {
|
public class Challenge5 extends Lesson {
|
||||||
|
|
||||||
|
@ -29,10 +29,6 @@ import org.springframework.web.bind.annotation.ResponseBody;
|
|||||||
import org.springframework.web.bind.annotation.RestController;
|
import org.springframework.web.bind.annotation.RestController;
|
||||||
import org.springframework.web.client.RestTemplate;
|
import org.springframework.web.client.RestTemplate;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 4/8/17.
|
|
||||||
*/
|
|
||||||
@RestController
|
@RestController
|
||||||
@Slf4j
|
@Slf4j
|
||||||
public class Assignment7 implements AssignmentEndpoint {
|
public class Assignment7 implements AssignmentEndpoint {
|
||||||
|
@ -8,10 +8,6 @@ import org.owasp.webgoat.container.lessons.Category;
|
|||||||
import org.owasp.webgoat.container.lessons.Lesson;
|
import org.owasp.webgoat.container.lessons.Lesson;
|
||||||
import org.springframework.stereotype.Component;
|
import org.springframework.stereotype.Component;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 3/21/17.
|
|
||||||
*/
|
|
||||||
@Component
|
@Component
|
||||||
public class Challenge7 extends Lesson {
|
public class Challenge7 extends Lesson {
|
||||||
|
|
||||||
|
@ -8,9 +8,6 @@ import java.util.Random;
|
|||||||
|
|
||||||
/**
|
/**
|
||||||
* WARNING: DO NOT CHANGE FILE WITHOUT CHANGING .git contents
|
* WARNING: DO NOT CHANGE FILE WITHOUT CHANGING .git contents
|
||||||
*
|
|
||||||
* @author nbaars
|
|
||||||
* @since 8/17/17.
|
|
||||||
*/
|
*/
|
||||||
public class PasswordResetLink {
|
public class PasswordResetLink {
|
||||||
|
|
||||||
|
@ -8,10 +8,6 @@ import org.owasp.webgoat.container.lessons.Category;
|
|||||||
import org.owasp.webgoat.container.lessons.Lesson;
|
import org.owasp.webgoat.container.lessons.Lesson;
|
||||||
import org.springframework.stereotype.Component;
|
import org.springframework.stereotype.Component;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 3/21/17.
|
|
||||||
*/
|
|
||||||
@Component
|
@Component
|
||||||
public class Challenge8 extends Lesson {
|
public class Challenge8 extends Lesson {
|
||||||
|
|
||||||
|
@ -8,10 +8,6 @@ import org.owasp.webgoat.container.lessons.Category;
|
|||||||
import org.owasp.webgoat.container.lessons.Lesson;
|
import org.owasp.webgoat.container.lessons.Lesson;
|
||||||
import org.springframework.stereotype.Component;
|
import org.springframework.stereotype.Component;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author TMelzer
|
|
||||||
* @since 30.11.18
|
|
||||||
*/
|
|
||||||
@Component
|
@Component
|
||||||
public class ChromeDevTools extends Lesson {
|
public class ChromeDevTools extends Lesson {
|
||||||
|
|
||||||
|
@ -15,12 +15,6 @@ import org.springframework.web.bind.annotation.RequestParam;
|
|||||||
import org.springframework.web.bind.annotation.ResponseBody;
|
import org.springframework.web.bind.annotation.ResponseBody;
|
||||||
import org.springframework.web.bind.annotation.RestController;
|
import org.springframework.web.bind.annotation.RestController;
|
||||||
|
|
||||||
/**
|
|
||||||
* This is just a class used to make the HTTP request.
|
|
||||||
*
|
|
||||||
* @author TMelzer
|
|
||||||
* @since 30.11.18
|
|
||||||
*/
|
|
||||||
@RestController
|
@RestController
|
||||||
public class NetworkDummy implements AssignmentEndpoint {
|
public class NetworkDummy implements AssignmentEndpoint {
|
||||||
|
|
||||||
|
@ -19,9 +19,6 @@ import org.springframework.web.bind.annotation.RestController;
|
|||||||
/**
|
/**
|
||||||
* Assignment where the user has to look through an HTTP Request using the Developer Tools and find
|
* Assignment where the user has to look through an HTTP Request using the Developer Tools and find
|
||||||
* a specific number.
|
* a specific number.
|
||||||
*
|
|
||||||
* @author TMelzer
|
|
||||||
* @since 30.11.18
|
|
||||||
*/
|
*/
|
||||||
@RestController
|
@RestController
|
||||||
@AssignmentHints({"networkHint1", "networkHint2"})
|
@AssignmentHints({"networkHint1", "networkHint2"})
|
||||||
|
@ -8,10 +8,6 @@ import org.owasp.webgoat.container.lessons.Category;
|
|||||||
import org.owasp.webgoat.container.lessons.Lesson;
|
import org.owasp.webgoat.container.lessons.Lesson;
|
||||||
import org.springframework.stereotype.Component;
|
import org.springframework.stereotype.Component;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author BenediktStuhrmann
|
|
||||||
* @since 11/2/18.
|
|
||||||
*/
|
|
||||||
@Component
|
@Component
|
||||||
public class CIA extends Lesson {
|
public class CIA extends Lesson {
|
||||||
|
|
||||||
|
@ -15,10 +15,6 @@ import org.springframework.web.bind.annotation.RequestParam;
|
|||||||
import org.springframework.web.bind.annotation.ResponseBody;
|
import org.springframework.web.bind.annotation.ResponseBody;
|
||||||
import org.springframework.web.bind.annotation.RestController;
|
import org.springframework.web.bind.annotation.RestController;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 4/6/17.
|
|
||||||
*/
|
|
||||||
@RestController
|
@RestController
|
||||||
@AssignmentHints({
|
@AssignmentHints({
|
||||||
"client.side.filtering.free.hint1",
|
"client.side.filtering.free.hint1",
|
||||||
|
@ -15,10 +15,6 @@ import org.springframework.web.bind.annotation.PathVariable;
|
|||||||
import org.springframework.web.bind.annotation.RequestMapping;
|
import org.springframework.web.bind.annotation.RequestMapping;
|
||||||
import org.springframework.web.bind.annotation.RestController;
|
import org.springframework.web.bind.annotation.RestController;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 4/6/17.
|
|
||||||
*/
|
|
||||||
@RestController
|
@RestController
|
||||||
@RequestMapping("/clientSideFiltering/challenge-store")
|
@RequestMapping("/clientSideFiltering/challenge-store")
|
||||||
public class ShopEndpoint {
|
public class ShopEndpoint {
|
||||||
|
@ -10,10 +10,6 @@ import lombok.Getter;
|
|||||||
import lombok.NoArgsConstructor;
|
import lombok.NoArgsConstructor;
|
||||||
import lombok.Setter;
|
import lombok.Setter;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 4/8/17.
|
|
||||||
*/
|
|
||||||
@Getter
|
@Getter
|
||||||
@Setter
|
@Setter
|
||||||
@AllArgsConstructor
|
@AllArgsConstructor
|
||||||
|
@ -8,12 +8,6 @@ import org.owasp.webgoat.container.lessons.Category;
|
|||||||
import org.owasp.webgoat.container.lessons.Lesson;
|
import org.owasp.webgoat.container.lessons.Lesson;
|
||||||
import org.springframework.stereotype.Component;
|
import org.springframework.stereotype.Component;
|
||||||
|
|
||||||
/***
|
|
||||||
*
|
|
||||||
* @author Angel Olle Blazquez
|
|
||||||
*
|
|
||||||
*/
|
|
||||||
|
|
||||||
@Component
|
@Component
|
||||||
public class HijackSession extends Lesson {
|
public class HijackSession extends Lesson {
|
||||||
|
|
||||||
|
@ -21,12 +21,6 @@ import org.springframework.web.bind.annotation.RequestParam;
|
|||||||
import org.springframework.web.bind.annotation.ResponseBody;
|
import org.springframework.web.bind.annotation.ResponseBody;
|
||||||
import org.springframework.web.bind.annotation.RestController;
|
import org.springframework.web.bind.annotation.RestController;
|
||||||
|
|
||||||
/***
|
|
||||||
*
|
|
||||||
* @author Angel Olle Blazquez
|
|
||||||
*
|
|
||||||
*/
|
|
||||||
|
|
||||||
@RestController
|
@RestController
|
||||||
@AssignmentHints({
|
@AssignmentHints({
|
||||||
"hijacksession.hints.1",
|
"hijacksession.hints.1",
|
||||||
|
@ -9,9 +9,6 @@ import lombok.Builder;
|
|||||||
import lombok.Getter;
|
import lombok.Getter;
|
||||||
import lombok.ToString;
|
import lombok.ToString;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author Angel Olle Blazquez
|
|
||||||
*/
|
|
||||||
@Getter
|
@Getter
|
||||||
@ToString
|
@ToString
|
||||||
public class Authentication implements Principal {
|
public class Authentication implements Principal {
|
||||||
|
@ -6,9 +6,6 @@ package org.owasp.webgoat.lessons.hijacksession.cas;
|
|||||||
|
|
||||||
import java.security.Principal;
|
import java.security.Principal;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author Angel Olle Blazquez
|
|
||||||
*/
|
|
||||||
@FunctionalInterface
|
@FunctionalInterface
|
||||||
public interface AuthenticationProvider<T extends Principal> {
|
public interface AuthenticationProvider<T extends Principal> {
|
||||||
|
|
||||||
|
@ -15,10 +15,6 @@ import org.apache.commons.lang3.StringUtils;
|
|||||||
import org.springframework.stereotype.Component;
|
import org.springframework.stereotype.Component;
|
||||||
import org.springframework.web.context.annotation.ApplicationScope;
|
import org.springframework.web.context.annotation.ApplicationScope;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author Angel Olle Blazquez
|
|
||||||
*/
|
|
||||||
|
|
||||||
// weak id value and mechanism
|
// weak id value and mechanism
|
||||||
|
|
||||||
@ApplicationScope
|
@ApplicationScope
|
||||||
|
@ -8,10 +8,6 @@ import org.owasp.webgoat.container.lessons.Category;
|
|||||||
import org.owasp.webgoat.container.lessons.Lesson;
|
import org.owasp.webgoat.container.lessons.Lesson;
|
||||||
import org.springframework.stereotype.Component;
|
import org.springframework.stereotype.Component;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 3/22/17.
|
|
||||||
*/
|
|
||||||
@Component
|
@Component
|
||||||
public class JWT extends Lesson {
|
public class JWT extends Lesson {
|
||||||
|
|
||||||
|
@ -4,10 +4,6 @@
|
|||||||
*/
|
*/
|
||||||
package org.owasp.webgoat.lessons.jwt.votes;
|
package org.owasp.webgoat.lessons.jwt.votes;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 4/30/17.
|
|
||||||
*/
|
|
||||||
public class Views {
|
public class Views {
|
||||||
public interface GuestView {}
|
public interface GuestView {}
|
||||||
|
|
||||||
|
@ -7,10 +7,6 @@ package org.owasp.webgoat.lessons.jwt.votes;
|
|||||||
import com.fasterxml.jackson.annotation.JsonView;
|
import com.fasterxml.jackson.annotation.JsonView;
|
||||||
import lombok.Getter;
|
import lombok.Getter;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 5/2/17.
|
|
||||||
*/
|
|
||||||
@Getter
|
@Getter
|
||||||
public class Vote {
|
public class Vote {
|
||||||
@JsonView(Views.GuestView.class)
|
@JsonView(Views.GuestView.class)
|
||||||
|
@ -17,10 +17,6 @@ import org.springframework.web.bind.annotation.RequestParam;
|
|||||||
import org.springframework.web.bind.annotation.ResponseBody;
|
import org.springframework.web.bind.annotation.ResponseBody;
|
||||||
import org.springframework.web.bind.annotation.RestController;
|
import org.springframework.web.bind.annotation.RestController;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 8/20/17.
|
|
||||||
*/
|
|
||||||
@RestController
|
@RestController
|
||||||
public class QuestionsAssignment implements AssignmentEndpoint {
|
public class QuestionsAssignment implements AssignmentEndpoint {
|
||||||
|
|
||||||
|
@ -29,10 +29,6 @@ import org.springframework.web.bind.annotation.ResponseBody;
|
|||||||
import org.springframework.web.bind.annotation.RestController;
|
import org.springframework.web.bind.annotation.RestController;
|
||||||
import org.springframework.web.servlet.ModelAndView;
|
import org.springframework.web.servlet.ModelAndView;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 8/20/17.
|
|
||||||
*/
|
|
||||||
@RestController
|
@RestController
|
||||||
@AssignmentHints({
|
@AssignmentHints({
|
||||||
"password-reset-hint1",
|
"password-reset-hint1",
|
||||||
|
@ -22,12 +22,6 @@ import org.springframework.web.bind.annotation.ResponseBody;
|
|||||||
import org.springframework.web.bind.annotation.RestController;
|
import org.springframework.web.bind.annotation.RestController;
|
||||||
import org.springframework.web.client.RestTemplate;
|
import org.springframework.web.client.RestTemplate;
|
||||||
|
|
||||||
/**
|
|
||||||
* Part of the password reset assignment. Used to send the e-mail.
|
|
||||||
*
|
|
||||||
* @author nbaars
|
|
||||||
* @since 8/20/17.
|
|
||||||
*/
|
|
||||||
@RestController
|
@RestController
|
||||||
public class ResetLinkAssignmentForgotPassword implements AssignmentEndpoint {
|
public class ResetLinkAssignmentForgotPassword implements AssignmentEndpoint {
|
||||||
|
|
||||||
|
@ -17,12 +17,6 @@ import org.springframework.web.bind.annotation.RequestParam;
|
|||||||
import org.springframework.web.bind.annotation.ResponseBody;
|
import org.springframework.web.bind.annotation.ResponseBody;
|
||||||
import org.springframework.web.bind.annotation.RestController;
|
import org.springframework.web.bind.annotation.RestController;
|
||||||
|
|
||||||
/**
|
|
||||||
* Assignment for picking a good security question.
|
|
||||||
*
|
|
||||||
* @author Tobias Melzer
|
|
||||||
* @since 11.12.18
|
|
||||||
*/
|
|
||||||
@RestController
|
@RestController
|
||||||
public class SecurityQuestionAssignment implements AssignmentEndpoint {
|
public class SecurityQuestionAssignment implements AssignmentEndpoint {
|
||||||
|
|
||||||
|
@ -23,10 +23,6 @@ import org.springframework.web.bind.annotation.RestController;
|
|||||||
import org.springframework.web.client.RestClientException;
|
import org.springframework.web.client.RestClientException;
|
||||||
import org.springframework.web.client.RestTemplate;
|
import org.springframework.web.client.RestTemplate;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 8/20/17.
|
|
||||||
*/
|
|
||||||
@RestController
|
@RestController
|
||||||
public class SimpleMailAssignment implements AssignmentEndpoint {
|
public class SimpleMailAssignment implements AssignmentEndpoint {
|
||||||
private final String webWolfURL;
|
private final String webWolfURL;
|
||||||
|
@ -9,10 +9,6 @@ import jakarta.validation.constraints.Size;
|
|||||||
import lombok.Getter;
|
import lombok.Getter;
|
||||||
import lombok.Setter;
|
import lombok.Setter;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 8/18/17.
|
|
||||||
*/
|
|
||||||
@Getter
|
@Getter
|
||||||
@Setter
|
@Setter
|
||||||
public class PasswordChangeForm {
|
public class PasswordChangeForm {
|
||||||
|
@ -8,10 +8,6 @@ import org.owasp.webgoat.container.lessons.Category;
|
|||||||
import org.owasp.webgoat.container.lessons.Lesson;
|
import org.owasp.webgoat.container.lessons.Lesson;
|
||||||
import org.springframework.stereotype.Component;
|
import org.springframework.stereotype.Component;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author BenediktStuhrmann
|
|
||||||
* @since 12/2/18.
|
|
||||||
*/
|
|
||||||
@Component
|
@Component
|
||||||
public class SecurePasswords extends Lesson {
|
public class SecurePasswords extends Lesson {
|
||||||
|
|
||||||
|
@ -8,12 +8,6 @@ import org.owasp.webgoat.container.lessons.Category;
|
|||||||
import org.owasp.webgoat.container.lessons.Lesson;
|
import org.owasp.webgoat.container.lessons.Lesson;
|
||||||
import org.springframework.stereotype.Component;
|
import org.springframework.stereotype.Component;
|
||||||
|
|
||||||
/***
|
|
||||||
*
|
|
||||||
* @author Angel Olle Blazquez
|
|
||||||
*
|
|
||||||
*/
|
|
||||||
|
|
||||||
@Component
|
@Component
|
||||||
public class SpoofCookie extends Lesson {
|
public class SpoofCookie extends Lesson {
|
||||||
|
|
||||||
|
@ -25,12 +25,6 @@ import org.springframework.web.bind.annotation.RequestParam;
|
|||||||
import org.springframework.web.bind.annotation.ResponseBody;
|
import org.springframework.web.bind.annotation.ResponseBody;
|
||||||
import org.springframework.web.bind.annotation.RestController;
|
import org.springframework.web.bind.annotation.RestController;
|
||||||
|
|
||||||
/***
|
|
||||||
*
|
|
||||||
* @author Angel Olle Blazquez
|
|
||||||
*
|
|
||||||
*/
|
|
||||||
|
|
||||||
@AssignmentHints({"spoofcookie.hint1", "spoofcookie.hint2", "spoofcookie.hint3"})
|
@AssignmentHints({"spoofcookie.hint1", "spoofcookie.hint2", "spoofcookie.hint3"})
|
||||||
@RestController
|
@RestController
|
||||||
public class SpoofCookieAssignment implements AssignmentEndpoint {
|
public class SpoofCookieAssignment implements AssignmentEndpoint {
|
||||||
|
@ -9,12 +9,6 @@ import java.util.Base64;
|
|||||||
import org.apache.commons.lang3.RandomStringUtils;
|
import org.apache.commons.lang3.RandomStringUtils;
|
||||||
import org.springframework.security.crypto.codec.Hex;
|
import org.springframework.security.crypto.codec.Hex;
|
||||||
|
|
||||||
/***
|
|
||||||
*
|
|
||||||
* @author Angel Olle Blazquez
|
|
||||||
*
|
|
||||||
*/
|
|
||||||
|
|
||||||
public class EncDec {
|
public class EncDec {
|
||||||
|
|
||||||
// PoC: weak encoding method
|
// PoC: weak encoding method
|
||||||
|
@ -17,10 +17,6 @@ import org.springframework.web.bind.annotation.RequestParam;
|
|||||||
import org.springframework.web.bind.annotation.ResponseBody;
|
import org.springframework.web.bind.annotation.ResponseBody;
|
||||||
import org.springframework.web.bind.annotation.RestController;
|
import org.springframework.web.bind.annotation.RestController;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 6/13/17.
|
|
||||||
*/
|
|
||||||
@RestController
|
@RestController
|
||||||
@RequestMapping("SqlInjectionMitigations/servers")
|
@RequestMapping("SqlInjectionMitigations/servers")
|
||||||
@Slf4j
|
@Slf4j
|
||||||
|
@ -18,10 +18,6 @@ import org.springframework.web.bind.annotation.ResponseBody;
|
|||||||
import org.springframework.web.bind.annotation.RestController;
|
import org.springframework.web.bind.annotation.RestController;
|
||||||
import org.springframework.web.servlet.ModelAndView;
|
import org.springframework.web.servlet.ModelAndView;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 8/20/17.
|
|
||||||
*/
|
|
||||||
@RestController
|
@RestController
|
||||||
public class LandingAssignment implements AssignmentEndpoint {
|
public class LandingAssignment implements AssignmentEndpoint {
|
||||||
private final String landingPageUrl;
|
private final String landingPageUrl;
|
||||||
|
@ -20,10 +20,6 @@ import org.springframework.web.bind.annotation.RestController;
|
|||||||
import org.springframework.web.client.RestClientException;
|
import org.springframework.web.client.RestClientException;
|
||||||
import org.springframework.web.client.RestTemplate;
|
import org.springframework.web.client.RestTemplate;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 8/20/17.
|
|
||||||
*/
|
|
||||||
@RestController
|
@RestController
|
||||||
public class MailAssignment implements AssignmentEndpoint {
|
public class MailAssignment implements AssignmentEndpoint {
|
||||||
|
|
||||||
|
@ -10,10 +10,6 @@ import lombok.Getter;
|
|||||||
import lombok.NoArgsConstructor;
|
import lombok.NoArgsConstructor;
|
||||||
import lombok.Setter;
|
import lombok.Setter;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 4/8/17.
|
|
||||||
*/
|
|
||||||
@Getter
|
@Getter
|
||||||
@Setter
|
@Setter
|
||||||
@AllArgsConstructor
|
@AllArgsConstructor
|
||||||
|
@ -12,10 +12,6 @@ import lombok.NoArgsConstructor;
|
|||||||
import lombok.Setter;
|
import lombok.Setter;
|
||||||
import lombok.ToString;
|
import lombok.ToString;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 4/8/17.
|
|
||||||
*/
|
|
||||||
@Getter
|
@Getter
|
||||||
@Setter
|
@Setter
|
||||||
@AllArgsConstructor
|
@AllArgsConstructor
|
||||||
|
@ -14,10 +14,6 @@ import org.springframework.web.bind.annotation.RequestMapping;
|
|||||||
import org.springframework.web.bind.annotation.ResponseBody;
|
import org.springframework.web.bind.annotation.ResponseBody;
|
||||||
import org.springframework.web.bind.annotation.RestController;
|
import org.springframework.web.bind.annotation.RestController;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 5/4/17.
|
|
||||||
*/
|
|
||||||
@RestController
|
@RestController
|
||||||
@RequestMapping("xxe/comments")
|
@RequestMapping("xxe/comments")
|
||||||
@AllArgsConstructor
|
@AllArgsConstructor
|
||||||
|
@ -14,10 +14,6 @@ import org.springframework.web.servlet.config.annotation.ResourceHandlerRegistry
|
|||||||
import org.springframework.web.servlet.config.annotation.ViewControllerRegistry;
|
import org.springframework.web.servlet.config.annotation.ViewControllerRegistry;
|
||||||
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
|
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 8/13/17.
|
|
||||||
*/
|
|
||||||
@Configuration
|
@Configuration
|
||||||
public class MvcConfiguration implements WebMvcConfigurer {
|
public class MvcConfiguration implements WebMvcConfigurer {
|
||||||
|
|
||||||
|
@ -18,10 +18,6 @@ import lombok.Builder;
|
|||||||
import lombok.Data;
|
import lombok.Data;
|
||||||
import lombok.NoArgsConstructor;
|
import lombok.NoArgsConstructor;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 8/20/17.
|
|
||||||
*/
|
|
||||||
@Data
|
@Data
|
||||||
@Builder
|
@Builder
|
||||||
@AllArgsConstructor
|
@AllArgsConstructor
|
||||||
|
@ -7,10 +7,6 @@ package org.owasp.webgoat.webwolf.mailbox;
|
|||||||
import java.util.List;
|
import java.util.List;
|
||||||
import org.springframework.data.jpa.repository.JpaRepository;
|
import org.springframework.data.jpa.repository.JpaRepository;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 8/17/17.
|
|
||||||
*/
|
|
||||||
public interface MailboxRepository extends JpaRepository<Email, String> {
|
public interface MailboxRepository extends JpaRepository<Email, String> {
|
||||||
|
|
||||||
List<Email> findByRecipientOrderByTimeDesc(String recipient);
|
List<Email> findByRecipientOrderByTimeDesc(String recipient);
|
||||||
|
@ -21,9 +21,6 @@ import org.springframework.web.servlet.ModelAndView;
|
|||||||
|
|
||||||
/**
|
/**
|
||||||
* Controller for fetching all the HTTP requests from WebGoat to WebWolf for a specific user.
|
* Controller for fetching all the HTTP requests from WebGoat to WebWolf for a specific user.
|
||||||
*
|
|
||||||
* @author nbaars
|
|
||||||
* @since 8/13/17.
|
|
||||||
*/
|
*/
|
||||||
@Controller
|
@Controller
|
||||||
@RequiredArgsConstructor
|
@RequiredArgsConstructor
|
||||||
|
@ -16,9 +16,6 @@ import org.springframework.boot.actuate.web.exchanges.HttpExchangeRepository;
|
|||||||
/**
|
/**
|
||||||
* Keep track of all the incoming requests, we are only keeping track of request originating from
|
* Keep track of all the incoming requests, we are only keeping track of request originating from
|
||||||
* WebGoat.
|
* WebGoat.
|
||||||
*
|
|
||||||
* @author nbaars
|
|
||||||
* @since 8/13/17.
|
|
||||||
*/
|
*/
|
||||||
public class WebWolfTraceRepository implements HttpExchangeRepository {
|
public class WebWolfTraceRepository implements HttpExchangeRepository {
|
||||||
private enum MatchingMode {
|
private enum MatchingMode {
|
||||||
|
@ -7,10 +7,6 @@ package org.owasp.webgoat.webwolf.user;
|
|||||||
import org.springframework.data.jpa.repository.JpaRepository;
|
import org.springframework.data.jpa.repository.JpaRepository;
|
||||||
import org.springframework.stereotype.Repository;
|
import org.springframework.stereotype.Repository;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 3/19/17.
|
|
||||||
*/
|
|
||||||
@Repository("webWolfUserRepository")
|
@Repository("webWolfUserRepository")
|
||||||
public interface UserRepository extends JpaRepository<WebWolfUser, String> {
|
public interface UserRepository extends JpaRepository<WebWolfUser, String> {
|
||||||
|
|
||||||
|
@ -8,10 +8,6 @@ import org.springframework.security.core.userdetails.UserDetailsService;
|
|||||||
import org.springframework.security.core.userdetails.UsernameNotFoundException;
|
import org.springframework.security.core.userdetails.UsernameNotFoundException;
|
||||||
import org.springframework.stereotype.Service;
|
import org.springframework.stereotype.Service;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 3/19/17.
|
|
||||||
*/
|
|
||||||
@Service
|
@Service
|
||||||
public class UserService implements UserDetailsService {
|
public class UserService implements UserDetailsService {
|
||||||
|
|
||||||
|
@ -15,10 +15,6 @@ import org.springframework.security.core.GrantedAuthority;
|
|||||||
import org.springframework.security.core.userdetails.User;
|
import org.springframework.security.core.userdetails.User;
|
||||||
import org.springframework.security.core.userdetails.UserDetails;
|
import org.springframework.security.core.userdetails.UserDetails;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 3/19/17.
|
|
||||||
*/
|
|
||||||
@Getter
|
@Getter
|
||||||
@Entity
|
@Entity
|
||||||
@Table(name = "WEB_GOAT_USER")
|
@Table(name = "WEB_GOAT_USER")
|
||||||
|
@ -29,10 +29,6 @@ import org.springframework.test.web.servlet.MockMvc;
|
|||||||
import org.springframework.test.web.servlet.setup.MockMvcBuilders;
|
import org.springframework.test.web.servlet.setup.MockMvcBuilders;
|
||||||
import org.springframework.web.context.WebApplicationContext;
|
import org.springframework.web.context.WebApplicationContext;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 5/20/17.
|
|
||||||
*/
|
|
||||||
@SpringBootTest(webEnvironment = SpringBootTest.WebEnvironment.RANDOM_PORT, classes = WebGoat.class)
|
@SpringBootTest(webEnvironment = SpringBootTest.WebEnvironment.RANDOM_PORT, classes = WebGoat.class)
|
||||||
@TestPropertySource(
|
@TestPropertySource(
|
||||||
locations = {
|
locations = {
|
||||||
|
@ -14,10 +14,6 @@ import org.owasp.webgoat.container.plugins.LessonTest;
|
|||||||
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
||||||
import org.springframework.test.web.servlet.setup.MockMvcBuilders;
|
import org.springframework.test.web.servlet.setup.MockMvcBuilders;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 6/16/17.
|
|
||||||
*/
|
|
||||||
public class BypassRestrictionsFrontendValidationTest extends LessonTest {
|
public class BypassRestrictionsFrontendValidationTest extends LessonTest {
|
||||||
|
|
||||||
@BeforeEach
|
@BeforeEach
|
||||||
|
@ -14,10 +14,6 @@ import org.owasp.webgoat.container.plugins.LessonTest;
|
|||||||
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
||||||
import org.springframework.test.web.servlet.setup.MockMvcBuilders;
|
import org.springframework.test.web.servlet.setup.MockMvcBuilders;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author Benedikt Stuhrmann
|
|
||||||
* @since 13/03/19.
|
|
||||||
*/
|
|
||||||
public class ChromeDevToolsTest extends LessonTest {
|
public class ChromeDevToolsTest extends LessonTest {
|
||||||
|
|
||||||
@BeforeEach
|
@BeforeEach
|
||||||
|
@ -14,10 +14,6 @@ import org.owasp.webgoat.container.plugins.LessonTest;
|
|||||||
import org.springframework.test.web.servlet.MvcResult;
|
import org.springframework.test.web.servlet.MvcResult;
|
||||||
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author Benedikt Stuhrmann
|
|
||||||
* @since 13/03/19.
|
|
||||||
*/
|
|
||||||
class CIAQuizTest extends LessonTest {
|
class CIAQuizTest extends LessonTest {
|
||||||
|
|
||||||
@Test
|
@Test
|
||||||
|
@ -14,10 +14,6 @@ import org.owasp.webgoat.container.plugins.LessonTest;
|
|||||||
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
||||||
import org.springframework.test.web.servlet.setup.MockMvcBuilders;
|
import org.springframework.test.web.servlet.setup.MockMvcBuilders;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 5/2/17.
|
|
||||||
*/
|
|
||||||
public class ClientSideFilteringAssignmentTest extends LessonTest {
|
public class ClientSideFilteringAssignmentTest extends LessonTest {
|
||||||
|
|
||||||
@BeforeEach
|
@BeforeEach
|
||||||
|
@ -16,10 +16,6 @@ import org.owasp.webgoat.container.plugins.LessonTest;
|
|||||||
import org.springframework.test.web.servlet.MockMvc;
|
import org.springframework.test.web.servlet.MockMvc;
|
||||||
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 5/2/17.
|
|
||||||
*/
|
|
||||||
public class ShopEndpointTest extends LessonTest {
|
public class ShopEndpointTest extends LessonTest {
|
||||||
|
|
||||||
private MockMvc mockMvc;
|
private MockMvc mockMvc;
|
||||||
|
@ -17,10 +17,6 @@ import org.owasp.webgoat.container.plugins.LessonTest;
|
|||||||
import org.springframework.http.MediaType;
|
import org.springframework.http.MediaType;
|
||||||
import org.springframework.test.web.servlet.setup.MockMvcBuilders;
|
import org.springframework.test.web.servlet.setup.MockMvcBuilders;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 11/17/17.
|
|
||||||
*/
|
|
||||||
public class CSRFFeedbackTest extends LessonTest {
|
public class CSRFFeedbackTest extends LessonTest {
|
||||||
|
|
||||||
@BeforeEach
|
@BeforeEach
|
||||||
|
@ -21,11 +21,6 @@ import org.springframework.boot.test.mock.mockito.MockBean;
|
|||||||
import org.springframework.test.web.servlet.ResultActions;
|
import org.springframework.test.web.servlet.ResultActions;
|
||||||
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
||||||
|
|
||||||
/***
|
|
||||||
*
|
|
||||||
* @author Angel Olle Blazquez
|
|
||||||
*
|
|
||||||
*/
|
|
||||||
class HijackSessionAssignmentTest extends LessonTest {
|
class HijackSessionAssignmentTest extends LessonTest {
|
||||||
|
|
||||||
private static final String COOKIE_NAME = "hijack_cookie";
|
private static final String COOKIE_NAME = "hijack_cookie";
|
||||||
|
@ -17,12 +17,6 @@ import org.junit.jupiter.params.provider.Arguments;
|
|||||||
import org.junit.jupiter.params.provider.MethodSource;
|
import org.junit.jupiter.params.provider.MethodSource;
|
||||||
import org.owasp.webgoat.lessons.hijacksession.cas.Authentication.AuthenticationBuilder;
|
import org.owasp.webgoat.lessons.hijacksession.cas.Authentication.AuthenticationBuilder;
|
||||||
|
|
||||||
/***
|
|
||||||
*
|
|
||||||
* @author Angel Olle Blazquez
|
|
||||||
*
|
|
||||||
*/
|
|
||||||
|
|
||||||
class HijackSessionAuthenticationProviderTest {
|
class HijackSessionAuthenticationProviderTest {
|
||||||
|
|
||||||
HijackSessionAuthenticationProvider provider = new HijackSessionAuthenticationProvider();
|
HijackSessionAuthenticationProvider provider = new HijackSessionAuthenticationProvider();
|
||||||
|
@ -24,12 +24,6 @@ import org.springframework.http.MediaType;
|
|||||||
import org.springframework.test.web.servlet.ResultActions;
|
import org.springframework.test.web.servlet.ResultActions;
|
||||||
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
||||||
|
|
||||||
/***
|
|
||||||
*
|
|
||||||
* @author Angel Olle Blazquez
|
|
||||||
*
|
|
||||||
*/
|
|
||||||
|
|
||||||
class SpoofCookieAssignmentTest extends LessonTest {
|
class SpoofCookieAssignmentTest extends LessonTest {
|
||||||
|
|
||||||
private static final String COOKIE_NAME = "spoof_auth";
|
private static final String COOKIE_NAME = "spoof_auth";
|
||||||
|
@ -15,12 +15,6 @@ import org.junit.jupiter.params.ParameterizedTest;
|
|||||||
import org.junit.jupiter.params.provider.Arguments;
|
import org.junit.jupiter.params.provider.Arguments;
|
||||||
import org.junit.jupiter.params.provider.MethodSource;
|
import org.junit.jupiter.params.provider.MethodSource;
|
||||||
|
|
||||||
/***
|
|
||||||
*
|
|
||||||
* @author Angel Olle Blazquez
|
|
||||||
*
|
|
||||||
*/
|
|
||||||
|
|
||||||
class EncDecTest {
|
class EncDecTest {
|
||||||
|
|
||||||
@ParameterizedTest
|
@ParameterizedTest
|
||||||
|
@ -12,10 +12,6 @@ import org.junit.jupiter.api.Test;
|
|||||||
import org.owasp.webgoat.container.plugins.LessonTest;
|
import org.owasp.webgoat.container.plugins.LessonTest;
|
||||||
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author Benedikt Stuhrmann
|
|
||||||
* @since 11/07/18.
|
|
||||||
*/
|
|
||||||
public class SqlInjectionLesson10Test extends LessonTest {
|
public class SqlInjectionLesson10Test extends LessonTest {
|
||||||
|
|
||||||
private String completedError = "JSON path \"lessonCompleted\"";
|
private String completedError = "JSON path \"lessonCompleted\"";
|
||||||
|
@ -13,10 +13,6 @@ import org.junit.jupiter.api.Test;
|
|||||||
import org.owasp.webgoat.container.plugins.LessonTest;
|
import org.owasp.webgoat.container.plugins.LessonTest;
|
||||||
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author Benedikt Stuhrmann
|
|
||||||
* @since 11/07/18.
|
|
||||||
*/
|
|
||||||
public class SqlInjectionLesson8Test extends LessonTest {
|
public class SqlInjectionLesson8Test extends LessonTest {
|
||||||
|
|
||||||
@Test
|
@Test
|
||||||
|
@ -13,10 +13,6 @@ import org.junit.jupiter.api.Test;
|
|||||||
import org.owasp.webgoat.container.plugins.LessonTest;
|
import org.owasp.webgoat.container.plugins.LessonTest;
|
||||||
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author Benedikt Stuhrmann
|
|
||||||
* @since 11/07/18.
|
|
||||||
*/
|
|
||||||
public class SqlInjectionLesson9Test extends LessonTest {
|
public class SqlInjectionLesson9Test extends LessonTest {
|
||||||
|
|
||||||
private final String completedError = "JSON path \"lessonCompleted\"";
|
private final String completedError = "JSON path \"lessonCompleted\"";
|
||||||
|
@ -12,10 +12,6 @@ import org.junit.jupiter.api.Test;
|
|||||||
import org.owasp.webgoat.container.plugins.LessonTest;
|
import org.owasp.webgoat.container.plugins.LessonTest;
|
||||||
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author nbaars
|
|
||||||
* @since 5/21/17.
|
|
||||||
*/
|
|
||||||
public class SqlInjectionLesson13Test extends LessonTest {
|
public class SqlInjectionLesson13Test extends LessonTest {
|
||||||
|
|
||||||
@Test
|
@Test
|
||||||
|
@ -14,10 +14,6 @@ import org.owasp.webgoat.container.plugins.LessonTest;
|
|||||||
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
||||||
import org.springframework.test.web.servlet.setup.MockMvcBuilders;
|
import org.springframework.test.web.servlet.setup.MockMvcBuilders;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author afry
|
|
||||||
* @since 12/28/18.
|
|
||||||
*/
|
|
||||||
public class SSRFTest1 extends LessonTest {
|
public class SSRFTest1 extends LessonTest {
|
||||||
|
|
||||||
@BeforeEach
|
@BeforeEach
|
||||||
|
@ -14,10 +14,6 @@ import org.owasp.webgoat.container.plugins.LessonTest;
|
|||||||
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
||||||
import org.springframework.test.web.servlet.setup.MockMvcBuilders;
|
import org.springframework.test.web.servlet.setup.MockMvcBuilders;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author afry
|
|
||||||
* @since 12/28/18.
|
|
||||||
*/
|
|
||||||
public class SSRFTest2 extends LessonTest {
|
public class SSRFTest2 extends LessonTest {
|
||||||
|
|
||||||
@BeforeEach
|
@BeforeEach
|
||||||
|
@ -12,9 +12,6 @@ import org.junit.jupiter.api.Test;
|
|||||||
import org.owasp.webgoat.container.plugins.LessonTest;
|
import org.owasp.webgoat.container.plugins.LessonTest;
|
||||||
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
|
||||||
|
|
||||||
/**
|
|
||||||
* @author Angel Olle Blazquez
|
|
||||||
*/
|
|
||||||
class CrossSiteScriptingLesson1Test extends LessonTest {
|
class CrossSiteScriptingLesson1Test extends LessonTest {
|
||||||
|
|
||||||
private static final String CONTEXT_PATH = "/CrossSiteScripting/attack1";
|
private static final String CONTEXT_PATH = "/CrossSiteScripting/attack1";
|
||||||
|
Loading…
x
Reference in New Issue
Block a user