cebf74cd10
Challenge 3: First setup completed
2017-04-15 11:37:43 +02:00
6a9f7e0b0f
Challenge 2: making elements on page work together
2017-04-15 11:37:43 +02:00
05bb61ad57
Roundtrip for challenge 2 done
2017-04-15 11:37:43 +02:00
599f36fdb8
Challenge 2 JavaScript is working
2017-04-15 11:37:43 +02:00
d1bf80a670
First steps for challenge 2
2017-04-15 11:37:43 +02:00
ebf2f9d864
wip
2017-04-15 11:37:43 +02:00
b093d36dc3
Added more for challenge 1 including input form group for flag
2017-04-15 11:37:43 +02:00
911fe36557
First attempt for challenge
2017-04-15 11:37:43 +02:00
8def26825b
#345 Lesson about Insecure Object References does not work - WebGoat 8.0
2017-04-09 06:53:14 +02:00
98000d6002
Fixing links in several lessons
2017-03-23 09:41:01 +01:00
634a4c75b6
Fix path to javascript file
2017-03-31 12:11:14 +02:00
e094dd6d14
Typo's
2017-03-31 12:06:45 +02:00
259fd19c1b
- Introduced user registration
...
- Now using Spring Boot for classloading, this way local development does not need to restart the complete server
- Fixed all kinds of dependencies on the names of the lessons necessary to keep in mind during the creation of a lesson.
- Simplied loading of resources, by adding resource mappings in MvcConfig.
- Refactored plugin loading, now only one class is left for loading the lessons.
2017-03-22 11:35:14 +01:00
9b86aaba05
Adding challenge
2017-03-22 00:09:17 +01:00
ad3e9439ec
[fix] SQLi Lessons 6a-b: lesson passed's boolean
2017-03-03 17:19:33 +01:00
f5c3610aba
[fix] path in HttpProxies html file was wrong
2017-03-02 21:34:31 +01:00
f71d02fc6a
Merge branch 'develop' into develop
2017-03-02 21:24:09 +01:00
2d6235e4f0
Provide Server-side service to support UI localization #265
...
- Now also enabled for adoc
2017-03-02 21:17:21 +01:00
153dc57731
Basic solutions cheat file for now
2017-02-17 16:18:57 -05:00
3193b591d8
commenting out latter part of XSS for now
2017-02-17 16:18:36 -05:00
ac6e8b59b7
XSS updates
2017-02-17 15:59:38 -05:00
d99a1d8448
temp. dep. mgmt resolution
2017-02-17 14:53:23 -05:00
7f532f0ffc
XSS lesson updates
2017-02-17 13:05:54 -05:00
0de569339c
Cleanup of vulnerable components
2017-02-08 11:37:11 -05:00
27947cca96
Fixed the SQL Injection to return results upon success
2017-02-08 00:01:44 -05:00
33e807797c
Xstream RCE works now
2017-02-07 23:51:05 -05:00
65d728dfff
Solved issue with POST in vulnerable components lesson
2017-02-07 23:49:26 +01:00
8d3b028acc
Solved issue with POST in vulnerable components lesson
2017-02-07 23:38:57 +01:00
a00546638a
Merge branch 'develop' of https://github.com/WebGoat/WebGoat into develop
2017-02-07 16:06:45 -05:00
b4159385c1
Vulnerable components draft, fixed missing properties in httpbasics when user input was empty
2017-02-07 16:05:30 -05:00
40844bd823
#319 updated content for proxy
2017-02-07 18:13:27 +01:00
85ef7ee1a4
Merge branch 'develop' of https://github.com/WebGoat/WebGoat into develop
2017-02-06 09:19:29 -05:00
d25700434e
Added tests for assignments
2017-01-31 23:28:59 +01:00
ee5a12d205
Provide Server-side service to support UI localization #265 ( #322 )
...
merging
2017-01-31 11:52:33 -05:00
fbd37b39bd
Merge branch 'develop' of https://github.com/WebGoat/WebGoat into develop
2017-01-28 11:05:16 -05:00
ef3779ec13
Draft Vuln components
2017-01-28 11:05:09 -05:00
a564ff2038
adding in Vulnerable Components lesson
2017-01-28 10:59:44 -05:00
2b31a19143
#319
2017-01-27 15:39:31 -05:00
264f7e74b6
Minor clean up in assignment endpoint
2017-01-25 14:56:20 -05:00
f7ec164601
Adding request intercept assignment
2017-01-25 14:56:20 -05:00
ac16342c17
#315 Adding UI handling and corresponding expected elements for html files for decoration. Inlucdes minor refactor
2017-01-25 17:46:31 +01:00
0779f7a3d0
Hints per lesson ( #314 )
...
Squashing and merging ...
* Each assigment should have the options to have its own set of hints #278
* Updating lessons due to changes from #278
* Enable i18n client side #312
* IDOR move hints to assignment and enable i18n #312
2017-01-24 09:34:06 -05:00
6d727b98e3
Create IDOR lesson #304
...
- Fix put mapping
2017-01-18 20:50:37 +01:00
4e9b30d7f6
#304 incremental addition for IDOR, still experiencing 400 with PUT method
2017-01-09 14:02:00 -05:00
fe4f568fc0
#304 update to IDOR. Still experiencing 400 on EditOwnProfile endpoint
2017-01-06 13:04:03 -05:00
0a41b2813d
#304 ... trying to fix prev. commit
2017-01-06 08:06:49 -05:00
65eaa934ea
Initial/partial commit of IDOR lesson
2017-01-05 17:30:53 -05:00
9c03b6f63b
#276 Automatic lesson summary page
...
- Basic overview of all the assignments needed to be solved in a lesson
- Clicking on a link will jump to the correct page with the assignment
- Lesson completed also updates lesson overview immediately
2016-12-28 10:14:34 +01:00
282073ed2d
Adding ZAP content for HTTP Basics
2016-12-22 16:37:57 -05:00
6fa894938b
Issue #275 : Activate Syntax Highlighting with Coderay in Asciidoc templates
2016-12-15 17:37:30 +01:00
