Nanne Baars
87a7521dcd
Adding introduction to WebGoat as the web interface opens with WebWolf which is confusing because people thought you needed to download WebWolf and start it directly. Feedback received during workshops
2017-11-02 14:28:20 +01:00
Nanne Baars
d1729e8f3c
Adding version number to Dockerfile as variable
2017-10-18 20:57:57 +02:00
Nanne Baars
1ecb43092d
Bumped version number
2017-10-18 19:58:14 +02:00
Nanne Baars
8250b4048f
Updating version number
2017-10-18 19:43:33 +02:00
Nanne Baars
42775c1980
Adding apt-get install of curl to Dockerfile
2017-10-18 12:07:56 +02:00
Nanne Baars
3ee1a1ca16
Travis now builds Docker and create a Github release.
...
Removed ActiveMQ between WebGoat and WebWolf they now act as standalone applications
2017-10-18 10:54:16 +02:00
Jason White
d0ec84e9a6
Merge remote-tracking branch 'upstream/develop' into develop
2017-10-11 20:29:47 -06:00
Jason White
b156d81535
Initial cut on CSRF. More to come
2017-10-11 20:06:57 -06:00
Nanne Baars
109fe2c438
Added WebWolf to Docker
2017-09-12 23:44:32 +02:00
Nanne Baars
46c536554c
- Added new challenges
...
- Added new webapplication called WebWolf to make attacks more realistic
- Added WebWolf lesson to explain the concepts behind this new application
2017-09-12 23:12:10 +02:00
Nanne Baars
56f19caed6
#380 Download mongodb while building the Docker image. If you are behind a proxy (or no connection) during the start of WebGoat you might not be able to download the mongodb binary.
2017-08-15 08:15:44 +02:00
Jason White
06bf690a3a
Merge remote-tracking branch 'upstream/develop' into develop
2017-08-02 19:12:29 -04:00
Nanne Baars
0b92a57f77
WebGoat no longer runs as root in the Docker container.
2017-07-26 05:06:40 +02:00
Jason White
c44186f986
start of missing function ac lesson
2017-07-24 16:26:23 -04:00
Jason White
ce7c271bb5
initial cut on auth-bypass lesson
2017-07-18 15:59:46 -04:00
Jason White
ccb4e3813b
#353 - lesson template/guide
2017-06-23 14:46:09 -04:00
Nanne Baars
7809057208
Enabled the challenges again to make them visible for everybody who starts WebGoat
2017-06-15 23:38:04 +02:00
Michal Smolík
870fa000aa
bypass front-end restrictions (javascript validation)
2017-06-13 10:09:39 +02:00
Michal Smolík
01421ca822
html restrictions lesson
2017-06-13 10:09:39 +02:00
Michal Smolík
007cdaa0d8
insecure login lesson
2017-06-13 10:09:39 +02:00
Nanne Baars
05f6fb226f
Removed challenges from pom.xml
2017-05-04 03:05:47 +02:00
Nanne Baars
911fe36557
First attempt for challenge
2017-04-15 11:37:43 +02:00
Nanne Baars
98000d6002
Fixing links in several lessons
2017-03-23 09:41:01 +01:00
Nanne Baars
7f9af71c4c
Updating Docker files to reflect new naming of the server standalone jar
2017-03-22 17:43:46 +01:00
Nanne Baars
259fd19c1b
- Introduced user registration
...
- Now using Spring Boot for classloading, this way local development does not need to restart the complete server
- Fixed all kinds of dependencies on the names of the lessons necessary to keep in mind during the creation of a lesson.
- Simplied loading of resources, by adding resource mappings in MvcConfig.
- Refactored plugin loading, now only one class is left for loading the lessons.
2017-03-22 11:35:14 +01:00
