258 Commits

Author SHA1 Message Date
Dave
a387d06a34 Refactored files to Maven standard Layout
Added plugin to produce executable jar. Now it is easy to run webgoat on all platforms.
2014-08-23 13:07:10 -04:00
mayhew64@gmail.com
6a96547ef0 Restructured the baseline to remove extra src/main directory structure. Added eclipes project file
git-svn-id: http://webgoat.googlecode.com/svn/branches/webgoat-6.0@485 4033779f-a91e-0410-96ef-6bf7bf53c507
2012-11-19 23:57:51 +00:00
phillip.seay@gmail.com
fb938e0933 Initial commit of new spring-MVC/spring security/tiles-based functionality
git-svn-id: http://webgoat.googlecode.com/svn/branches/webgoat-6.0@484 4033779f-a91e-0410-96ef-6bf7bf53c507
2012-09-11 00:26:09 +00:00
mayhew64@gmail.com
02bcf39ecf alphabetized the credits
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@475 4033779f-a91e-0410-96ef-6bf7bf53c507
2012-04-27 20:02:44 +00:00
mayhew64@gmail.com
c66b16c500 Changed the field1.replaceAll to field1 = field1.replaceAll. The first case does not clean the taint
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@474 4033779f-a91e-0410-96ef-6bf7bf53c507
2012-04-27 14:14:24 +00:00
mayhew64@gmail.com
94c89b66d4 Printing out full command for command[] argument. Using arrays.tolist() which adds a [] around the text. that should be cleaned up.
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@473 4033779f-a91e-0410-96ef-6bf7bf53c507
2012-04-27 12:24:51 +00:00
mayhew64@gmail.com
7b4f5541aa Updated challenge screen to 5.4, added authors sections, changed ccs to support new spacing
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@472 4033779f-a91e-0410-96ef-6bf7bf53c507
2012-04-27 12:23:36 +00:00
sherif.fathy@gmail.com
751c993f22 Issue 42
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@470 4033779f-a91e-0410-96ef-6bf7bf53c507
2012-04-26 17:29:19 +00:00
mayhew64@gmail.com
ff9a54ef91 Changed errors for dropping tables to info messages
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@468 4033779f-a91e-0410-96ef-6bf7bf53c507
2012-04-26 16:11:46 +00:00
mayhew64@gmail.com
5add3e7c06 Fixed more /webgoat versus /WebGoat issues.
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@467 4033779f-a91e-0410-96ef-6bf7bf53c507
2012-04-26 16:11:18 +00:00
mayhew64@gmail.com
f9bf8c6a27 Added clarification that 2 methods are needed to pass lesson
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@466 4033779f-a91e-0410-96ef-6bf7bf53c507
2012-04-25 18:45:10 +00:00
mayhew64@gmail.com
9c6a51e8b1 Added additional instructions that 2 methods are required to pass lesson
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@465 4033779f-a91e-0410-96ef-6bf7bf53c507
2012-04-25 18:42:20 +00:00
mayhew64@gmail.com
2ae584d0b2 Allowed other criteria to solve lesson and provide some feedback for acceptable solutions
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@464 4033779f-a91e-0410-96ef-6bf7bf53c507
2012-04-25 18:30:06 +00:00
mayhew64@gmail.com
a987ca7cdc added _ to the allowed characterset. Allows for usernames with an _ in them
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@463 4033779f-a91e-0410-96ef-6bf7bf53c507
2012-04-25 18:29:31 +00:00
sherif.fathy
05b9e0d045 git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@456 4033779f-a91e-0410-96ef-6bf7bf53c507 2012-04-24 16:18:15 +00:00
mayhew64@gmail.com
9a5c004ca1 Couple of email subject changes
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@455 4033779f-a91e-0410-96ef-6bf7bf53c507
2012-04-24 16:17:17 +00:00
mayhew64@gmail.com
2e541bdec2 Added an expanded help and debug filing section
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@454 4033779f-a91e-0410-96ef-6bf7bf53c507
2012-04-24 15:09:21 +00:00
mayhew64@gmail.com
8963bb9fad Changed image link to be WebGoat/...
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@453 4033779f-a91e-0410-96ef-6bf7bf53c507
2012-04-23 23:12:14 +00:00
mayhew64@gmail.com
0dbd506dc0 Works in Unix (Ubuntu). Check for command separator was not present in the exec.
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@452 4033779f-a91e-0410-96ef-6bf7bf53c507
2012-04-23 23:11:51 +00:00
mayhew64@gmail.com
97523b615c Changed link to be WebGoat instead of webgoat
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@450 4033779f-a91e-0410-96ef-6bf7bf53c507
2012-04-23 19:57:25 +00:00
mayhew64@gmail.com
4db8688443 Added suggested text for cracking times
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@449 4033779f-a91e-0410-96ef-6bf7bf53c507
2012-04-23 19:56:34 +00:00
mayhew64@gmail.com
ffd141a49f Updated cookie retrieval to decode. helps with people using firebug to solve since firecookie will encode
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@448 4033779f-a91e-0410-96ef-6bf7bf53c507
2012-04-23 19:56:10 +00:00
x71c4l@gmail.com
77e5765f4e Updated splash screen
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@447 4033779f-a91e-0410-96ef-6bf7bf53c507
2012-04-23 18:46:29 +00:00
mayhew64@gmail.com
40329271eb Startup scripts, changes to make offbyone more sequential
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@446 4033779f-a91e-0410-96ef-6bf7bf53c507
2012-04-21 17:18:08 +00:00
deige101@gmail.com
1477c99bc2 Updated the Aspect logo
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@438 4033779f-a91e-0410-96ef-6bf7bf53c507
2012-01-02 18:40:31 +00:00
sherif.fathy@gmail.com
ba97e884a4 Corrected information related to credits.
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@437 4033779f-a91e-0410-96ef-6bf7bf53c507
2011-09-29 00:32:56 +00:00
x71c4l@gmail.com
4059bb5d33 Added Buffer Overflow lesson, added and updated solutions, fixed errors in lessons preventing them from being completed correctly
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@436 4033779f-a91e-0410-96ef-6bf7bf53c507
2011-08-12 03:00:27 +00:00
x71c4l@gmail.com
be8b4311e0 Fixed source code installation problem where default language didn't set correctly. Also updated the readme
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@435 4033779f-a91e-0410-96ef-6bf7bf53c507
2011-07-27 04:15:58 +00:00
white.tiger.russia@gmail.com
c30d4650fd Web Services
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@433 4033779f-a91e-0410-96ef-6bf7bf53c507
2011-06-02 12:17:37 +00:00
white.tiger.russia@gmail.com
312a10d577 Translated plans for chapter "Session Management Flaws"
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@432 4033779f-a91e-0410-96ef-6bf7bf53c507
2011-06-02 11:20:26 +00:00
white.tiger.russia@gmail.com
f35779571c Translated plans for chapter "Parameter Tampering"
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@431 4033779f-a91e-0410-96ef-6bf7bf53c507
2011-06-02 04:34:00 +00:00
white.tiger.russia@gmail.com
4ac799c702 Translated plans for chapters "Insecure Communication", "Insecure Configuration", "Insecure Storage"
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@430 4033779f-a91e-0410-96ef-6bf7bf53c507
2011-05-31 14:42:58 +00:00
white.tiger.russia@gmail.com
d10e7bdf00 Translated plans for chapters "Denial of service", "Improper Error Handling", "Injection Flaws"
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@429 4033779f-a91e-0410-96ef-6bf7bf53c507
2011-05-31 13:33:49 +00:00
white.tiger.russia@gmail.com
22a8385c77 Translated plans from chapter 'Cross-Site scriptiong'
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@428 4033779f-a91e-0410-96ef-6bf7bf53c507
2011-05-25 14:01:58 +00:00
white.tiger.russia@gmail.com
a66e8d4c78 Translated materials from chapters 'Buffer Overflows','CodeQuality','Concurrency'
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@427 4033779f-a91e-0410-96ef-6bf7bf53c507
2011-05-24 13:59:24 +00:00
white.tiger.russia@gmail.com
17c1c68525 Translated chapter 'Authentification flaws'
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@426 4033779f-a91e-0410-96ef-6bf7bf53c507
2011-05-24 11:02:50 +00:00
white.tiger.russia@gmail.com
443f7e7e75 Translated chapter 'AJAX Security'
Fixed small error in Http Basics lesson

git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@425 4033779f-a91e-0410-96ef-6bf7bf53c507
2011-05-23 14:58:39 +00:00
white.tiger.russia@gmail.com
f0978e6422 Russian translate of labels (UTF-8)
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@424 4033779f-a91e-0410-96ef-6bf7bf53c507
2011-05-22 18:41:10 +00:00
white.tiger.russia@gmail.com
f119ac120d Chapter "Access control flaws" translated on Russian (UTF-8)
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@423 4033779f-a91e-0410-96ef-6bf7bf53c507
2011-05-22 12:27:37 +00:00
white.tiger.russia@gmail.com
23f0a2ef33 Translated chapters "Introduction" and "General" on Russian language
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@422 4033779f-a91e-0410-96ef-6bf7bf53c507
2011-05-22 11:32:12 +00:00
white.tiger.russia@gmail.com
06a0e50dfe Create directories ru/en/de and copy there plans of lessons. In ru-directory i put english files for translate them in future.
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@421 4033779f-a91e-0410-96ef-6bf7bf53c507
2011-05-22 11:22:28 +00:00
mariethuynh
4aef25a58d typo
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@419 4033779f-a91e-0410-96ef-6bf7bf53c507
2010-03-28 02:08:12 +00:00
mariethuynh
39d99eb5d7 fixed URL, typos
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@418 4033779f-a91e-0410-96ef-6bf7bf53c507
2010-03-23 00:31:43 +00:00
mayhew64@gmail.com
26a90ec2be Added a step to add the lesson plan for new lessons
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@417 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-11 19:42:29 +00:00
mayhew64@gmail.com
7e200c921d Fixed new lesson instructions location to match new file structure
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@416 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-11 18:45:30 +00:00
mayhew64@gmail.com
c3908e8700 More readme tweaks, fixed the delete command in the SQL Server startup
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@413 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-11 04:04:25 +00:00
mayhew64@gmail.com
e78ea07b3f Minor changes to missing internationalization text and startup scripts. Removed internationalization choices for lessons that don't support it
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@411 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-11 03:34:14 +00:00
mayhew64@gmail.com
d48519d1ec Fixed some broken formatting on screen layout, added the Malicious code to the hidden lessons until real lessons can be built
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@410 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-09 03:58:08 +00:00
mayhew64@gmail.com
5394b0d8a1 General cleanup of lesson, removed sub credit from csrf lesson, add cam credit as lesson contributor
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@409 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-09 01:49:41 +00:00
mayhew64@gmail.com
c35169291b Added some detail to the readme and moved some docs that are no longer relevant to the attic.
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@408 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-11-09 01:07:55 +00:00