11845f60de
make webgoat run on tomcat 5.5 again
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@404 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-05 20:00:55 +00:00
35ecb109cf
added paragraph about tomcat to README.txt
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@403 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-02 22:40:20 +00:00
792d66e189
added wtp configuration to pom
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@402 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-02 22:20:12 +00:00
751e4c404a
moved doco
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@401 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-01 21:12:40 +00:00
692461b7a6
moved doc folder
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@400 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-01 20:06:23 +00:00
03768fa4f7
updated readme
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@399 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-01 19:44:33 +00:00
7a19763a09
removed xml-apis from pon
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@398 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-01 18:45:25 +00:00
123a2d764f
README.txt for Maven build added
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@397 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-01 16:01:47 +00:00
87f09e5c92
moved property files to src/main/resources
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@396 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-01 15:08:35 +00:00
16ad95bc8e
added resources dir, removed catalina.jar which is only a build dependency
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@395 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-01 12:51:57 +00:00
e5730814c8
renamed main->src regarding to Maven conventions
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@394 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-01 11:54:43 +00:00
95643f4b2b
renamed project->main regarding to Maven conventions
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@393 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-01 11:16:30 +00:00
791341000c
renamed JavaSource -> java, WebContent -> webapp regarding to Maven convention
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@392 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-01 11:04:59 +00:00
bb15524a7a
restored setAdmin method removed in r389 to make the trunk compile again
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@391 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-01 10:39:29 +00:00
e15957ad68
Added 3 new lessons. Some strings are in the properties files, but not all. Modified CreateDB.java in order to create a new salaries table used by the new SQL injection lessons.
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@390 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-30 04:53:19 +00:00
fc08681d89
A first attempt at internationalization of WebGoat. For complete internationalization WebGoat needs two things:
...
1. Every text passage/label that appears in lessons must independent of the current language set for WebGoat.
2. Every lesson plan and solutions must be translated for each supported language.
Number 1 is achieved by using webgoat/util/WebgoatI18N.java and by having every output routed through this piece of code. You no longer say hints.add("Lesson Hint 1"); or ....addElement("Shopping Cart")) but you in the lesson you say hints.add(WebGoatI18N.get("Lesson Hint1")) or ....addElement(WebGoatI18N.get("Shopping Cart"). Then WebGoatI18N looks up the corresponding string for the language set as the current lanuage and returns it.
Number 2 is achieved by having subdirectories in lesson_plans corresponding to every language. That means, a lesson that has been translated to Spanish and German will be found in lesson_plans/English and lesson_plans/Spanish and lesson_plans/German.
This is how WebGoat finds out about available languages: in Course.java in loadResources() it looks for lesson plans.
Unlike before, now a lesson plan can be found multiple times in different "language" directories. So for every directory the lesson plan is found in, WebGoat associates this language with the lesson and also lets WebGoatI18N load the appropriate WebGoatLabels_$LANGAUGE$.properties file which contains the translations of labels.
So this is what you have to do for a new language:
First of all, you have to copy and translate every lesson plan that you need in the new language, and then you also have to create a WebGoatLabels_$LANGUAGE$.properties file with that labels that will be used in these lessons. Atm WebGoat crashes throws an exception when a label is missing but this can be sorted out quickly.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@389 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-26 15:58:15 +00:00
826b9e73bc
Malcode samples - need to turn into lessons
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@388 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-26 11:24:12 +00:00
d971d2f734
Including one small documentation change: giving credit to Sherif Koussa's original CSRF lesson
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@387 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-23 21:29:42 +00:00
85c6843ee4
This change includes two additional CSRF lessons. One for
...
by-passing a prompt (showing why prompts don't work). The second for
by-passing CSRF tokens when XSS exists.
It also modifies the existing CSRF lesson so that the lesson
can be extended and used by the two new lessons.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@386 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-23 21:23:17 +00:00
72936c72b9
Three new lessons and supporting files and changes to other files. Some changes to other files may not be quite the "right" way to accomplish my goal, so they may need to be updated. I deleted the old BlindSQLInjection lesson (which was by me) since it is replaced by the two new lessons for BlindNumericSqlInjection and BlindStringSqlInjection. Other new lesson is for MaliciousFileExecution, which requires the Apache Commons fileupload library (which in turn needs the commons io library).
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@385 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-20 04:30:00 +00:00
cef196e172
Re-adding .jar file that appears to have been removed recently. Re-adding this file should fix build some build errors.
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@384 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-20 03:56:46 +00:00
c00b8b2dfe
initial version of pom.xml
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@383 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-12 21:06:55 +00:00
271d746153
infos to dependencies
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@382 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-11 15:19:25 +00:00
34270c8931
replaced jars with versions from maven repo to prepare migration
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@381 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-11 13:47:42 +00:00
24acd5081d
replaced jars with versions from maven repo to prepare migration
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@380 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-11 11:07:01 +00:00
c719c47128
replaced axis jars with versions from maven repo; removed catalina.jar no longer needed
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@379 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-10 23:39:11 +00:00
87ce172faa
fixed typo (Issue 29) - test commit
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@378 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-07 21:15:11 +00:00
f5200a8fd0
5.3 Logo
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@377 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-02-04 13:06:48 +00:00
0032ffdbfc
Changed the credit card user to be the user that was logged in as. Also base64 encoded the user cookie to make finding sql injection slightly harder.
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@376 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-02-03 18:16:51 +00:00
cafcea2ae9
Changed the class build.
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@375 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-02-03 17:56:48 +00:00
88a730f225
Removed errors introduced in previous checkin. String and integer conflicts in JSP
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@374 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-02-03 17:55:27 +00:00
97571dbe90
Lots of wording changes and HTML fixes.
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@373 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-01-06 21:06:42 +00:00
5506f1c279
Fixing wording a smidge.
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@372 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-01-06 20:19:22 +00:00
9331ef0d9a
Changes by Chris Roe to fix lesson issues with FireFox.
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@371 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-12-17 13:06:29 +00:00
6d1158c40c
fixed a typo
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@370 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-12-11 21:15:20 +00:00
64899b3ee3
Standardized all the HTML, clarified things, and fixed a whole bunch of grammar issues.
...
I also changed the explanation for Browser Cache Poisoning; the old explanation was incorrect. If I'm mistaken on that, feel free to revert that part of the explanation.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@369 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-12-11 20:04:15 +00:00
f6e994b14e
Minor syntax issue with the word prename in the instructions - reported by April King
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@368 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-12-10 23:52:04 +00:00
9d8c58bef3
Removed hardcoded webgoat path for URLs
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@367 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-11-21 16:57:23 +00:00
bab1f6aeb7
Reported by dwpoon, Yesterday (17 hours ago)
...
I would like to submit the attached patch to avoid hard-coding
"/WebGoat" as the webapp's context path, at least for the HTTP splitting
lesson. This issue has also been reported in July 2007; see
https://lists.owasp.org/pipermail/owasp-webgoat/2007-July/000432.html
Also see Issue 15 http://code.google.com/p/webgoat/issues/detail?id=15
git-svn-id: http://webgoat.googlecode.com/svn/trunk@366 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-11-21 12:57:14 +00:00
58aa49317a
Contribution by Kristian Erik Hermansen. Fixed to work with 1.6
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@365 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-09-09 15:32:23 +00:00
5337ef31ff
minor bug fixes and enhancements, including proper dollar value formatting
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@364 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-08-14 14:31:17 +00:00
68357637bc
removing unused folder
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@363 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-08-14 12:56:14 +00:00
4c242f52dc
minor changes and improving display issues
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@362 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-08-12 17:36:30 +00:00
a3990f549e
some cleanup, and removing unneeded ClassNotFoundExceptions
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@361 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-08-12 14:33:22 +00:00
2203a1ebd2
corrected spelling and some formatting
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@360 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-08-11 14:39:09 +00:00
ba6560b24a
Formatting according to OWASP WebGoat Java Style
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@359 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-08-05 17:32:17 +00:00
acab6e9274
Removed build.xml
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@358 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-07-12 16:14:06 +00:00
8751d7579a
Removed windows and changed to developer
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@357 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-07-12 16:05:17 +00:00
ae79118f55
Logos that slipped through
...
git-svn-id: http://webgoat.googlecode.com/svn/trunk@356 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-07-12 16:04:22 +00:00
d849168ce1
Smaller eclipse workspace
...
Changed workspace name to reflect WebGoat
Added the video solutions link
Update readmen to reflect contributions and new stuff
git-svn-id: http://webgoat.googlecode.com/svn/trunk@355 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-07-12 15:40:13 +00:00
