Nanne Baars
c0dd773b90
Merge branch 'develop' into alexanderfry-feature/ssrf
2019-02-09 18:20:43 +01:00
Nanne Baars
bd86dc6ee0
SNAPSHOT version
2019-02-09 18:20:08 +01:00
Nanne Baars
d6dae9ef75
Merge branch 'feature/ssrf' of git://github.com/alexanderfry/WebGoat into alexanderfry-feature/ssrf
2019-02-09 16:42:08 +01:00
Nanne Baars
6c86929aa6
New release, updating pom.xml
2019-02-08 14:20:23 +01:00
Alex Fry
98f75e34d5
Initial Commit of SSRF Lesson
2019-01-21 18:09:31 -04:00
Nanne Baars
631fedb752
New release, updating pom.xml
2019-01-18 08:45:44 +01:00
Nanne Baars
9be4361afc
New release, updating pom.xml
2019-01-18 08:37:26 +01:00
Nanne Baars
ec225558b9
Move to latest Spring Boot version and move to Java 11
2018-12-15 13:59:54 +01:00
Nanne Baars
1252e3dc21
Update instructions to use docker-compose only
2018-07-17 20:17:35 +02:00
Nanne Baars
ac12a009e4
New release v8.0.0.M20
2018-06-20 18:05:59 +02:00
Nanne Baars
9dd93d88d9
New release v8.0.0.M19
2018-06-20 16:40:28 +02:00
Nanne Baars
26aa72e721
New release
2018-05-30 20:54:13 +02:00
Nanne Baars
c510bd9bf1
New develop version
2018-05-30 20:37:25 +02:00
Nanne Baars
c7a714a590
Move to next release
2018-05-30 17:05:50 +02:00
Nanne Baars
ecb7688e08
Update to new version for develop
...
Move WebWolf to port 9090 easier since most of the time something is running on 8081
Add scripts for easy building Docker files etc
2018-05-30 13:17:05 +02:00
Nanne Baars
55793dd153
New release v8.0.0.M15
2018-05-27 20:54:50 +02:00
Nanne Baars
eaf68d38c5
Initial commit for password reset lesson
2018-05-25 14:27:45 +02:00
Jose Selvi
84860e65f6
Insecure Deserialization exercise
2018-05-23 13:58:03 +02:00
Nanne Baars
f30db3abfc
New version number
2018-04-11 20:45:12 +02:00
nbaars
c6e86861fe
Removed Mongodb, so we do not have issues with downloading the embedded Mongodb. Moved back to JPA and use HSQLDB for storing user information.
2017-12-29 22:12:21 +01:00
Nanne Baars
f91f77708a
New version
2017-11-02 21:44:30 +01:00
Nanne Baars
87a7521dcd
Adding introduction to WebGoat as the web interface opens with WebWolf which is confusing because people thought you needed to download WebWolf and start it directly. Feedback received during workshops
2017-11-02 14:28:20 +01:00
Nanne Baars
1ecb43092d
Bumped version number
2017-10-18 19:58:14 +02:00
Nanne Baars
8250b4048f
Updating version number
2017-10-18 19:43:33 +02:00
Jason White
d0ec84e9a6
Merge remote-tracking branch 'upstream/develop' into develop
2017-10-11 20:29:47 -06:00
Jason White
b156d81535
Initial cut on CSRF. More to come
2017-10-11 20:06:57 -06:00
Nanne Baars
46c536554c
- Added new challenges
...
- Added new webapplication called WebWolf to make attacks more realistic
- Added WebWolf lesson to explain the concepts behind this new application
2017-09-12 23:12:10 +02:00
Jason White
c44186f986
start of missing function ac lesson
2017-07-24 16:26:23 -04:00
Jason White
ce7c271bb5
initial cut on auth-bypass lesson
2017-07-18 15:59:46 -04:00
Jason White
ccb4e3813b
#353 - lesson template/guide
2017-06-23 14:46:09 -04:00
Michal Smolík
870fa000aa
bypass front-end restrictions (javascript validation)
2017-06-13 10:09:39 +02:00
Michal Smolík
01421ca822
html restrictions lesson
2017-06-13 10:09:39 +02:00
Michal Smolík
007cdaa0d8
insecure login lesson
2017-06-13 10:09:39 +02:00
Nanne Baars
877de6ebd4
Updated XXE lessons with challenge screens
2017-05-21 12:24:42 +02:00
Nanne Baars
259fd19c1b
- Introduced user registration
...
- Now using Spring Boot for classloading, this way local development does not need to restart the complete server
- Fixed all kinds of dependencies on the names of the lessons necessary to keep in mind during the creation of a lesson.
- Simplied loading of resources, by adding resource mappings in MvcConfig.
- Refactored plugin loading, now only one class is left for loading the lessons.
2017-03-22 11:35:14 +01:00
Nanne Baars
9b86aaba05
Adding challenge
2017-03-22 00:09:17 +01:00
Nanne Baars
f71d02fc6a
Merge branch 'develop' into develop
2017-03-02 21:24:09 +01:00
Nanne Baars
2d6235e4f0
Provide Server-side service to support UI localization #265
...
- Now also enabled for adoc
2017-03-02 21:17:21 +01:00
Jason White
d99a1d8448
temp. dep. mgmt resolution
2017-02-17 14:53:23 -05:00
Nanne Baars
8d3b028acc
Solved issue with POST in vulnerable components lesson
2017-02-07 23:38:57 +01:00
mayhew64
85ef7ee1a4
Merge branch 'develop' of https://github.com/WebGoat/WebGoat into develop
2017-02-06 09:19:29 -05:00
Nanne Baars
d25700434e
Added tests for assignments
2017-01-31 23:28:59 +01:00
mayhew64
fbd37b39bd
Merge branch 'develop' of https://github.com/WebGoat/WebGoat into develop
2017-01-28 11:05:16 -05:00
mayhew64
a564ff2038
adding in Vulnerable Components lesson
2017-01-28 10:59:44 -05:00
Jason White
2b31a19143
#319
2017-01-27 15:39:31 -05:00
Jason White
65eaa934ea
Initial/partial commit of IDOR lesson
2017-01-05 17:30:53 -05:00
Nanne Baars
b8b632905d
Fixing failing unit test
2016-12-08 22:06:21 +01:00
mayhew64
95607089d4
First draft at XSS
2016-11-21 13:39:43 -05:00
Nanne Baars
f698a2d6ae
XXE first attempt
2016-11-17 16:27:41 +01:00
Nanne Baars
640e3ffb4e
mvn clean should also clean lesson jar files added .webgoat directory as well
2016-11-15 18:12:29 +01:00
