Nanne Baars
323daae578
Vulnerable components only work in a Docker container
2023-01-05 20:51:15 +01:00
Nanne Baars
3901814363
Fix documentation link for XXE mitigation.
2023-01-05 19:00:12 +01:00
Nanne Baars
59bfd7c6d4
Move XXE to A05 - Security Misconfiguration
2023-01-05 19:00:12 +01:00
Nanne Baars
dca415099f
Remove unused JavaScript function
2023-01-05 11:33:00 +01:00
Nanne Baars
54e115aff0
Update the solution with WebWolf URLs
...
The new solution uses WebWolf paths as these will change automatically when a user start WebGoat on a different port. It no longer depends on the hardcoded port `8080`.
2023-01-05 11:02:45 +01:00
Nanne Baars
fcaa2d8589
Fix zip slip lesson.
...
The lesson did not work properly as the directory is reused across several path traversal lessons. First thing before uploading the zip file we now clean the directory.
The html had a reference to a location of the profile picture, this was part of a hint but this only causes confusion as this is not indicating to where you need to upload the picture with the Zip Slip vulnerability.
The assignment now contains a direct hint as where the image needs to be saved. The assignment is about creating a vulnerable zip file and NOT about guessing where the image should be saved inside WebGoat.
2023-01-05 11:02:45 +01:00
Nanne Baars
9666597164
- Add reference to the WebWolf icon in the top right corner.
...
- Format all text of the lesson
2023-01-04 08:07:51 +01:00
Nanne Baars
d2a1546dff
Apply formatting
...
This will make sure we have a consistent style across our project and the PRs are only concerned with actual changes and no longer about style.
2023-01-04 08:07:23 +01:00
Nanne Baars
b03777d39b
Support boolean when parsing the token.
...
When the admin json element passes as a `boolean`:
```
{
"admin": true
}
```
the parsing is now successful.
2023-01-04 07:43:18 +01:00
Nanne Baars
32468ff90b
Add sql lesson ( #1370 )
2023-01-04 07:42:29 +01:00
Adam Szatyin
71ec36102f
Fix typo
2022-12-01 21:34:19 +01:00
András Veres-Szentkirályi
8db9ff30be
Fixed incorrect word
...
while "wear" and "were" have similar pronunciation, one of them is better here than the other :)
2022-11-29 18:55:44 +01:00
András Veres-Szentkirályi
b51be74cab
typofix
2022-11-28 17:10:14 +01:00
Jesper Hallborg
96c2595ad0
Update interface name to exploit
...
The name is
org.owasp.webgoat.lessons.vulnerablecomponents.Contact
not
org.owasp.webgoat.vulnerablecomponents.Contact
2022-09-21 22:32:16 +02:00
René Zubcevic
34f5b79249
isReadable works inside a container, isFile not ( #1334 )
2022-09-12 09:02:07 +02:00
Thanh Tran
f5e4d4717a
FixTypo - Fix typo in various lesson documentations
2022-08-30 22:21:22 +02:00
Àngel Ollé Blázquez
50f932b02e
Renamed to webwolfintroduction
2022-07-31 22:39:21 +02:00
Àngel Ollé Blázquez
251167c6b0
Renamed to webgoatintroduction
2022-07-31 22:39:21 +02:00
Àngel Ollé Blázquez
256c1dd3aa
Renamed to vulnerablecomponents
2022-07-31 22:39:21 +02:00
Àngel Ollé Blázquez
b93c935d6c
Renamed to sqlinjection
2022-07-31 22:39:21 +02:00
Àngel Ollé Blázquez
827a9d3467
Renamed to securepasswords
2022-07-31 22:39:21 +02:00
Àngel Ollé Blázquez
91470b93ea
Renamed to pathtraversal
2022-07-31 22:39:21 +02:00
Àngel Ollé Blázquez
37d684fdd3
Renamed to passwordreset
2022-07-31 22:39:21 +02:00
Àngel Ollé Blázquez
4f911c64a1
Renamed to missingac
2022-07-31 22:39:21 +02:00
Àngel Ollé Blázquez
e0a0a80ad9
Renamed to lessontemplate
2022-07-31 22:39:21 +02:00
Àngel Ollé Blázquez
26c289d7d4
Renamed to insecurelogin
2022-07-31 22:39:21 +02:00
Àngel Ollé Blázquez
1eff81718b
Renamed to httpproxies
2022-07-31 22:39:21 +02:00
Àngel Ollé Blázquez
08ce1add01
Renamed to httpbasics
2022-07-31 22:39:21 +02:00
Àngel Ollé Blázquez
25948306bd
Renamed to htmltampering
2022-07-31 22:39:21 +02:00
Àngel Ollé Blázquez
1c86f465dc
Renamed to clientsidefiltering
2022-07-31 22:39:21 +02:00
Àngel Ollé Blázquez
3b330fb328
Renamed to chromedevtools
2022-07-31 22:39:21 +02:00
Àngel Ollé Blázquez
8a35316985
Rename to bypassrestrictions
2022-07-31 22:39:21 +02:00
Àngel Ollé Blázquez
c63345e4ee
Rename authbypass
2022-07-31 22:39:21 +02:00
René Zubcevic
005b9f03a4
search the menu using input box ( #1317 )
...
* working version
* change onchange to oninput with minimum of three chars
* working version with delay and fix for category click
2022-07-31 20:45:09 +02:00
René Zubcevic
4d48bd3d4c
fix in style sheet that now shows normal dropdown behaviour ( #1315 )
2022-07-27 13:44:23 +02:00
Àngel Ollé Blázquez
242fdf39a1
Fixes #1233 - Path traversal seems to contain wrong description
2022-07-24 22:09:16 +02:00
René Zubcevic
6b63aaf8b1
Robot framework ( #1304 )
...
* added Robot framework UI tests
* added Robot framework UI tests workflow
* Update test.yml
wait in workflow
* remove obsolete selenium java libs and test
* Update test.yml
push result to commit as comment
* Update test.yml
push comment does not seem to work on WebGoat PR
* clean up unrequired robot options
* update readme
2022-07-24 12:28:01 +02:00
Nanne Baars
06b7244de7
Move XXE lesson to category A3: Injection
2022-07-23 09:39:52 +02:00
Nanne Baars
260168bb3f
Remove automatic selection of a random port
2022-07-23 09:39:52 +02:00
René Zubcevic
20dd3ffb95
Lang switch ( #1297 )
...
* language selector first steps
* language german intro added
* ascii doc lang attribute as additional option
* removed some commented code
* changed adoc resource loader to take into account the selected language
* added readme
* added lang test cases
2022-07-20 10:52:48 +02:00
Nanne Baars
24fcc8f321
Use starting instead of using.
2022-07-19 21:17:09 +02:00
Nanne Baars
ff965c83be
Adjust year
2022-07-19 21:17:09 +02:00
Nanne Baars
2aa3609461
Fix typo
2022-07-19 21:17:09 +02:00
Nanne Baars
fe7774bb6f
Update documentation regarding WebWolf
...
WebWolf no longer runs as a separate application we can simplify the description.
2022-07-19 21:17:09 +02:00
René Zubcevic
9e3eb39069
removed one duplicate label key and made all login and register fields multi language ( #1296 )
2022-07-16 06:53:39 +02:00
René Zubcevic
7add1ef73e
hints tested ( #1295 )
2022-07-15 12:44:37 +02:00
René Zubcevic
4fc03381a8
Label hint tests ( #1293 )
...
* label test
* adjusted it test filter
* label test added
2022-07-15 08:17:11 +02:00
René Zubcevic
16af4272a5
joda time refactored some dep fix ( #1292 )
2022-07-14 09:11:06 +02:00
René Zubcevic
f8b7ca5c85
Pom update ( #1290 )
...
* asciidoctorj update
* pom and suppression updates
2022-07-11 13:28:44 +02:00
René Zubcevic
e4eb5d783a
Some updates and code improvements ( #1288 )
...
* try with resources
* StringBuilder
* removed ant and updated spring boot
2022-07-10 17:13:26 +02:00
