6699456ee1
Bug fix in sample code
2018-11-19 08:15:41 +01:00
5921a06747
Fix SQL injection mitigation answer ( fixes #505 )
...
You need to submit the IP of the webgoat-prd server, not just any of the IPs.
2018-11-19 08:12:17 +01:00
1252e3dc21
Update instructions to use docker-compose only
2018-07-17 20:17:35 +02:00
63a50df7a1
Add hint to lesson users no longer have guess the complete ip address
2018-07-06 18:22:29 +02:00
2233550fe1
Adding more solutions for SQL order by lesson
2018-06-22 14:12:37 +02:00
ac12a009e4
New release v8.0.0.M20
2018-06-20 18:05:59 +02:00
9dd93d88d9
New release v8.0.0.M19
2018-06-20 16:40:28 +02:00
12123ef13b
Merge branch 'release/v8.0.0.M18'
2018-06-20 16:32:31 +02:00
b47bb96534
Update changed password in tests
2018-06-13 16:11:28 +02:00
56fc983414
Update database layout so that proposed solution works
2018-06-12 17:40:28 +02:00
268adbcf7e
Move assignments to correct package so that hints are shown
2018-06-12 17:40:28 +02:00
26aa72e721
New release
2018-05-30 20:54:13 +02:00
c510bd9bf1
New develop version
2018-05-30 20:37:25 +02:00
c7a714a590
Move to next release
2018-05-30 17:05:50 +02:00
ecb7688e08
Update to new version for develop
...
Move WebWolf to port 9090 easier since most of the time something is running on 8081
Add scripts for easy building Docker files etc
2018-05-30 13:17:05 +02:00
9587550bc5
Fixed column name on sql injection lesson 7
2018-05-29 14:42:22 +02:00
9a0995dae5
Fixed column name on sql injection lesson 6
2018-05-29 14:42:02 +02:00
55793dd153
New release v8.0.0.M15
2018-05-27 20:54:50 +02:00
eaf68d38c5
Initial commit for password reset lesson
2018-05-25 14:27:45 +02:00
0b9a027c19
Fix some minor grammatical issues.
2018-05-11 15:13:30 +02:00
e4ca0c4836
Make report working again
2018-04-27 19:26:01 +02:00
f30db3abfc
New version number
2018-04-11 20:45:12 +02:00
dec55d52ca
Replaced quotes with normal character (Version: 8.0.0.M5 Character Encoding Issues #411 )
2018-01-14 13:22:28 +01:00
f91f77708a
New version
2017-11-02 21:44:30 +01:00
1ecb43092d
Bumped version number
2017-10-18 19:58:14 +02:00
8250b4048f
Updating version number
2017-10-18 19:43:33 +02:00
5033c3661a
Cleaning up test case logging
2017-10-08 02:07:22 +02:00
46c536554c
- Added new challenges
...
- Added new webapplication called WebWolf to make attacks more realistic
- Added WebWolf lesson to explain the concepts behind this new application
2017-09-12 23:12:10 +02:00
b06fb72a74
Fixed typo
2017-07-25 17:41:37 +02:00
bf210de013
Added testcase for SQL lesson 6b
2017-06-16 00:33:02 +02:00
e808abd504
Added testcase for SQL lesson 6a
2017-06-16 00:23:40 +02:00
f1fd214580
Added more testcases for the SQL lesson 12
2017-06-15 23:49:03 +02:00
a484467419
Adding extra lesson for order by clauses
2017-06-15 19:08:19 +02:00
ee912f734b
Added SQL injection from challenge to lesson and added content for a blind sql injection
2017-06-15 19:08:19 +02:00
0740c4ba95
Split large SQL lesson
2017-06-15 19:08:19 +02:00
129e9deba9
Added testcase for SQL injection lesson
2017-05-21 16:40:52 +02:00
259fd19c1b
- Introduced user registration
...
- Now using Spring Boot for classloading, this way local development does not need to restart the complete server
- Fixed all kinds of dependencies on the names of the lessons necessary to keep in mind during the creation of a lesson.
- Simplied loading of resources, by adding resource mappings in MvcConfig.
- Refactored plugin loading, now only one class is left for loading the lessons.
2017-03-22 11:35:14 +01:00
ad3e9439ec
[fix] SQLi Lessons 6a-b: lesson passed's boolean
2017-03-03 17:19:33 +01:00
0de569339c
Cleanup of vulnerable components
2017-02-08 11:37:11 -05:00
27947cca96
Fixed the SQL Injection to return results upon success
2017-02-08 00:01:44 -05:00
ee5a12d205
Provide Server-side service to support UI localization #265 ( #322 )
...
merging
2017-01-31 11:52:33 -05:00
ac16342c17
#315 Adding UI handling and corresponding expected elements for html files for decoration. Inlucdes minor refactor
2017-01-25 17:46:31 +01:00
0779f7a3d0
Hints per lesson ( #314 )
...
Squashing and merging ...
* Each assigment should have the options to have its own set of hints #278
* Updating lessons due to changes from #278
* Enable i18n client side #312
* IDOR move hints to assignment and enable i18n #312
2017-01-24 09:34:06 -05:00
9c03b6f63b
#276 Automatic lesson summary page
...
- Basic overview of all the assignments needed to be solved in a lesson
- Clicking on a link will jump to the correct page with the assignment
- Lesson completed also updates lesson overview immediately
2016-12-28 10:14:34 +01:00
6fa894938b
Issue #275 : Activate Syntax Highlighting with Coderay in Asciidoc templates
2016-12-15 17:37:30 +01:00
1a854a500e
Lesson overview
2016-11-29 20:27:54 +01:00
95607089d4
First draft at XSS
2016-11-21 13:39:43 -05:00
507a4cfbdb
few cleanup items, added least privilege
2016-11-16 17:56:29 -05:00
f091e21c60
Fixed test for password
2016-11-16 16:18:22 -05:00
29447a11b4
First wave is complete; some rendering issues
2016-11-16 13:41:51 -05:00
