55 Commits

Author SHA1 Message Date
mayhew64
ca46354077 Minor Cleanup of imports and user guide url
git-svn-id: http://webgoat.googlecode.com/svn/trunk@105 4033779f-a91e-0410-96ef-6bf7bf53c507
2007-01-30 23:36:21 +00:00
mayhew64
0ab3ad8293 git-svn-id: http://webgoat.googlecode.com/svn/trunk@104 4033779f-a91e-0410-96ef-6bf7bf53c507 2007-01-30 16:24:15 +00:00
esheri3
82371bf0d9 Changed title (back?) to "Tracing".
git-svn-id: http://webgoat.googlecode.com/svn/trunk@102 4033779f-a91e-0410-96ef-6bf7bf53c507
2007-01-26 19:43:43 +00:00
esheri3
f5dfc0698d change all instances of "trace" to "tracing"
git-svn-id: http://webgoat.googlecode.com/svn/trunk@99 4033779f-a91e-0410-96ef-6bf7bf53c507
2007-01-26 19:06:42 +00:00
esheri3
f86af29210 Minor grammar fixes.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@97 4033779f-a91e-0410-96ef-6bf7bf53c507
2007-01-25 20:35:06 +00:00
esheri3
e0479efb65 Minor grammar fix.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@91 4033779f-a91e-0410-96ef-6bf7bf53c507
2007-01-25 19:42:25 +00:00
esheri3
94ee4db701 Minor grammar fix.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@90 4033779f-a91e-0410-96ef-6bf7bf53c507
2007-01-25 19:39:33 +00:00
esheri3
3579be2519 Minor grammar fixes.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@87 4033779f-a91e-0410-96ef-6bf7bf53c507
2007-01-25 19:34:46 +00:00
esheri3
62ab99b291 Minor grammar fixes.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@86 4033779f-a91e-0410-96ef-6bf7bf53c507
2007-01-25 19:32:24 +00:00
sherif.fathy
9db0e6eeb3 Modified the logo again
git-svn-id: http://webgoat.googlecode.com/svn/trunk@84 4033779f-a91e-0410-96ef-6bf7bf53c507
2007-01-25 02:08:28 +00:00
sherif.fathy
38e9a8967b Added the AoC logo
git-svn-id: http://webgoat.googlecode.com/svn/trunk@80 4033779f-a91e-0410-96ef-6bf7bf53c507
2007-01-24 05:10:43 +00:00
sherif.fathy
5188039079 fixed a bug with the forced browsing lesson
git-svn-id: http://webgoat.googlecode.com/svn/trunk@79 4033779f-a91e-0410-96ef-6bf7bf53c507
2007-01-24 04:25:08 +00:00
esheri3
19a0566c47 Removed DaveW from the "Design Team".
git-svn-id: http://webgoat.googlecode.com/svn/trunk@76 4033779f-a91e-0410-96ef-6bf7bf53c507
2007-01-23 18:20:12 +00:00
esheri3
d474b0aac6 Grammatical correctness. Updating (Aspect) wording.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@74 4033779f-a91e-0410-96ef-6bf7bf53c507
2007-01-23 15:33:39 +00:00
esheri3
5f97b23978 added DaveW to the list.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@73 4033779f-a91e-0410-96ef-6bf7bf53c507
2007-01-23 15:26:59 +00:00
esheri3
aa839396f2 Added a <br/> to break the third bullet. Modified the bullet text slightly (removed the "Also, you can")
git-svn-id: http://webgoat.googlecode.com/svn/trunk@70 4033779f-a91e-0410-96ef-6bf7bf53c507
2007-01-22 20:12:49 +00:00
esheri3
da81501499 Modified input fields so they line up better. In IE7, the input text boxes were over flowing the background image.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@69 4033779f-a91e-0410-96ef-6bf7bf53c507
2007-01-22 19:06:55 +00:00
esheri3
69d8a6e92a Modified input fields so they line up better. In IE7, the input text boxes were over flowing the background image.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@68 4033779f-a91e-0410-96ef-6bf7bf53c507
2007-01-22 19:06:32 +00:00
esheri3
5565d02de6 Modified input fields so they line up better. In IE7, the input text boxes were over flowing the background image.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@67 4033779f-a91e-0410-96ef-6bf7bf53c507
2007-01-22 19:06:01 +00:00
esheri3
a90d292239 Fixed spelling mistakes.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@64 4033779f-a91e-0410-96ef-6bf7bf53c507
2007-01-22 18:10:06 +00:00
esheri3
3ae171c303 Fixed a few spelling mistakes
git-svn-id: http://webgoat.googlecode.com/svn/trunk@63 4033779f-a91e-0410-96ef-6bf7bf53c507
2007-01-22 17:42:32 +00:00
mayhew64
dfdfb8bcaf Update info for OWASP build and for Release 5.0
git-svn-id: http://webgoat.googlecode.com/svn/trunk@62 4033779f-a91e-0410-96ef-6bf7bf53c507
2007-01-22 16:03:43 +00:00
mayhew64
8b51818508 Changed remaining contact information to reference an email address I receive (webgoat@g2-inc.com)
git-svn-id: http://webgoat.googlecode.com/svn/trunk@61 4033779f-a91e-0410-96ef-6bf7bf53c507
2007-01-16 18:29:06 +00:00
mayhew64
fd9b60f98e Added some files required to build OWASP release.
Modified License text and format to reflect GPL license.
Reformatted most of the code.

git-svn-id: http://webgoat.googlecode.com/svn/trunk@60 4033779f-a91e-0410-96ef-6bf7bf53c507
2007-01-16 14:56:40 +00:00
sherif.fathy
036964495b Fixed comments by Bruce
git-svn-id: http://webgoat.googlecode.com/svn/trunk@59 4033779f-a91e-0410-96ef-6bf7bf53c507
2007-01-11 05:14:09 +00:00
sherif.fathy
2fdf823259 Changed BackDoors lessons to be a little bit clearer, added more hints.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@58 4033779f-a91e-0410-96ef-6bf7bf53c507
2006-12-31 07:35:58 +00:00
sherif.fathy
c469a8b0a1 Fixed HttpSplitting and CSRF per Bruce's requests
git-svn-id: http://webgoat.googlecode.com/svn/trunk@57 4033779f-a91e-0410-96ef-6bf7bf53c507
2006-12-31 06:32:32 +00:00
sherif.fathy
ae225126ae Changed CSRF per Bruce's comments
git-svn-id: http://webgoat.googlecode.com/svn/trunk@56 4033779f-a91e-0410-96ef-6bf7bf53c507
2006-12-30 17:30:30 +00:00
sherif.fathy
63043b0f34 Modified Silent Transactions and XML Injection lesson per Bruce's comments
git-svn-id: http://webgoat.googlecode.com/svn/trunk@55 4033779f-a91e-0410-96ef-6bf7bf53c507
2006-12-30 08:07:48 +00:00
sherif.fathy
0429f917bc git-svn-id: http://webgoat.googlecode.com/svn/trunk@53 4033779f-a91e-0410-96ef-6bf7bf53c507 2006-12-29 05:13:24 +00:00
mayhew64
59c2427f0d V5 front page
git-svn-id: http://webgoat.googlecode.com/svn/trunk@50 4033779f-a91e-0410-96ef-6bf7bf53c507
2006-12-29 03:59:37 +00:00
sherif.fathy
37c56c748d modified CSRF to add an actual attack
git-svn-id: http://webgoat.googlecode.com/svn/trunk@49 4033779f-a91e-0410-96ef-6bf7bf53c507
2006-12-28 16:59:02 +00:00
sherif.fathy
5e061d5bad Added JSONInjection, SilentTransactions
Modified The install guide

git-svn-id: http://webgoat.googlecode.com/svn/trunk@48 4033779f-a91e-0410-96ef-6bf7bf53c507
2006-12-28 15:35:10 +00:00
sherif.fathy
af2df52e91 Added Backdoors lesson
git-svn-id: http://webgoat.googlecode.com/svn/trunk@47 4033779f-a91e-0410-96ef-6bf7bf53c507
2006-12-25 17:20:01 +00:00
mayhew64
3732cd80af Logo
git-svn-id: http://webgoat.googlecode.com/svn/trunk@46 4033779f-a91e-0410-96ef-6bf7bf53c507
2006-12-24 13:44:57 +00:00
mayhew64
05305c0096 replaced by lab properties
git-svn-id: http://webgoat.googlecode.com/svn/trunk@45 4033779f-a91e-0410-96ef-6bf7bf53c507
2006-12-24 13:40:23 +00:00
mayhew64
a394e58093 Missing Div tag
git-svn-id: http://webgoat.googlecode.com/svn/trunk@43 4033779f-a91e-0410-96ef-6bf7bf53c507
2006-12-24 13:34:56 +00:00
mayhew64
159f691b4b Build Procedures
git-svn-id: http://webgoat.googlecode.com/svn/trunk@42 4033779f-a91e-0410-96ef-6bf7bf53c507
2006-12-24 13:34:09 +00:00
sherif.fathy
67497f0919 Added a hint in log spoofing instructions for the user to add a script in the log file
git-svn-id: http://webgoat.googlecode.com/svn/trunk@41 4033779f-a91e-0410-96ef-6bf7bf53c507
2006-12-23 00:39:18 +00:00
sherif.fathy
7acbacbe61 Added Cache Poisining lesson as a staged lesson to HTTP Splitting lesson.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@40 4033779f-a91e-0410-96ef-6bf7bf53c507
2006-12-23 00:24:47 +00:00
sherif.fathy
9f76aeb38f More changes to the response splitting lesson plan.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@39 4033779f-a91e-0410-96ef-6bf7bf53c507
2006-12-22 00:49:29 +00:00
sherif.fathy
1d67443b22 Removed some commented code and added more description to the HTTP Splitting lesson
git-svn-id: http://webgoat.googlecode.com/svn/trunk@38 4033779f-a91e-0410-96ef-6bf7bf53c507
2006-12-22 00:20:31 +00:00
sherif.fathy
575d040c24 Added XMLInjection lesson
Modified DOM Injection lesson
Added gratification to http splitting

git-svn-id: http://webgoat.googlecode.com/svn/trunk@37 4033779f-a91e-0410-96ef-6bf7bf53c507
2006-12-21 04:39:32 +00:00
sherif.fathy
60d65681ff Renamed XMLInjection to XPATHInjection
Made some changes to the lesson according to Jeff's comments

git-svn-id: http://webgoat.googlecode.com/svn/trunk@36 4033779f-a91e-0410-96ef-6bf7bf53c507
2006-12-16 23:38:02 +00:00
sherif.fathy
296254e279 This patch contains the HTTP connector that intercepts the requests to the application and tries to communicate with OSG.
It also contains the DOM Injection lesson

git-svn-id: http://webgoat.googlecode.com/svn/trunk@35 4033779f-a91e-0410-96ef-6bf7bf53c507
2006-12-16 22:39:14 +00:00
sherif.fathy
80a2add2d7 - This patch fixes Forced Browsing lesson by removing any custom coding for WebSession and HammerHead.java
git-svn-id: http://webgoat.googlecode.com/svn/trunk@34 4033779f-a91e-0410-96ef-6bf7bf53c507
2006-12-04 04:35:04 +00:00
sherif.fathy
51d40b7b22 - Contains the XMLInjection lesson.
- New files added:
  XMLInjection.html, XMLInjection.java and XMLInjection/EmployeesData.xml

git-svn-id: http://webgoat.googlecode.com/svn/trunk@33 4033779f-a91e-0410-96ef-6bf7bf53c507
2006-12-02 19:45:59 +00:00
sherif.fathy
c2aee8017e git-svn-id: http://webgoat.googlecode.com/svn/trunk@32 4033779f-a91e-0410-96ef-6bf7bf53c507 2006-11-11 22:42:54 +00:00
sherif.fathy
99779ea2e9 Add a new lesson "How to add a new lesson" under new category "New Lessons"
Modified the existing lessons to present the solution in the last hint

git-svn-id: http://webgoat.googlecode.com/svn/trunk@31 4033779f-a91e-0410-96ef-6bf7bf53c507
2006-11-11 22:41:42 +00:00
sherif.fathy
6a59cd6e6e git-svn-id: http://webgoat.googlecode.com/svn/trunk@28 4033779f-a91e-0410-96ef-6bf7bf53c507 2006-11-03 01:14:36 +00:00