Commit Graph

40 Commits

Author SHA1 Message Date
d849168ce1 Smaller eclipse workspace
Changed workspace name to reflect WebGoat 
Added the video solutions link
Update readmen to reflect contributions and new stuff

git-svn-id: http://webgoat.googlecode.com/svn/trunk@355 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-07-12 15:40:13 +00:00
c8908f6911 Actually, I think the problem was happening because the lesson was returning the lesson HTML again incase of incorrect key to eval was throwing an error trying to evaluate a whole bunch of HTML. Fixed this by catching the exception and showing an appropriate message.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@354 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-07-12 05:56:41 +00:00
fbf2a079c8 Added bug report
Added message for missing solutions
Minor edits to lesson plans

git-svn-id: http://webgoat.googlecode.com/svn/trunk@353 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-07-11 00:05:05 +00:00
ec95ba4089 Separated DB usage for messages in CSRF and Stored XSS
Many cosmetic english changes
Fixed IE rendering for Challenge
 

git-svn-id: http://webgoat.googlecode.com/svn/trunk@350 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-07-09 00:17:20 +00:00
b0ade9782e Minor 5.2 changes.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@349 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-05-13 03:44:40 +00:00
429fd7b0a9 Alphabetized categories
git-svn-id: http://webgoat.googlecode.com/svn/trunk@347 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-05-12 13:10:17 +00:00
9071b86a59 Reorder categories to be alphabetized
Changed unvalidated input to parameter tampering

git-svn-id: http://webgoat.googlecode.com/svn/trunk@346 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-22 16:45:29 +00:00
243f8ca360 Minor fixes
removed many System.out.printlns
delete extra solutions directory - wrong location
added 5.2 credits

git-svn-id: http://webgoat.googlecode.com/svn/trunk@344 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-22 15:34:54 +00:00
314c350079 Minor changes... Tan gets now only updatet after it was correct
git-svn-id: http://webgoat.googlecode.com/svn/trunk@341 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-18 08:38:51 +00:00
2649bcb086 Session Fixation instructions altered
git-svn-id: http://webgoat.googlecode.com/svn/trunk@340 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-15 09:43:34 +00:00
e2ca7f9a33 Minor Bugfixes
git-svn-id: http://webgoat.googlecode.com/svn/trunk@338 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-14 13:28:25 +00:00
80d07fb62c Minor fixes
git-svn-id: http://webgoat.googlecode.com/svn/trunk@337 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-14 12:03:55 +00:00
8182db6dc4 InsecureLogin Credits added. Instructions changed
git-svn-id: http://webgoat.googlecode.com/svn/trunk@335 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-14 08:35:33 +00:00
40a997f6be SessionFixation and TomcatSetup edited
git-svn-id: http://webgoat.googlecode.com/svn/trunk@333 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-14 07:50:12 +00:00
55b36e911b InsecureLogin finished
git-svn-id: http://webgoat.googlecode.com/svn/trunk@327 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-13 22:17:07 +00:00
b24d805e93 Minor changes
git-svn-id: http://webgoat.googlecode.com/svn/trunk@326 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-13 22:16:35 +00:00
67f2783430 CreateDB altered for insecure_communication altered
git-svn-id: http://webgoat.googlecode.com/svn/trunk@325 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-13 17:18:36 +00:00
053112e7e0 Insecure Communication added
git-svn-id: http://webgoat.googlecode.com/svn/trunk@324 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-13 17:05:51 +00:00
1fca79e494 Warnings fixed:
Unneded imports deleted
Never read variables deleted

git-svn-id: http://webgoat.googlecode.com/svn/trunk@323 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-13 15:15:09 +00:00
265475391e Tomcat Setup instructions added
git-svn-id: http://webgoat.googlecode.com/svn/trunk@318 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-13 09:26:15 +00:00
dc9daba1c0 SessionFixation completed
git-svn-id: http://webgoat.googlecode.com/svn/trunk@317 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-12 08:28:54 +00:00
acaccaa9b9 Minor fixes
git-svn-id: http://webgoat.googlecode.com/svn/trunk@316 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-12 08:20:46 +00:00
789d72e589 Session Fixation bugfix
MultiLevelLogin2 bugfix

git-svn-id: http://webgoat.googlecode.com/svn/trunk@315 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-10 08:52:11 +00:00
7a0f43ca56 Session Fixation
git-svn-id: http://webgoat.googlecode.com/svn/trunk@311 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-09 14:09:31 +00:00
361e142442 MultiLevelLogin2 database
git-svn-id: http://webgoat.googlecode.com/svn/trunk@310 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-09 12:05:28 +00:00
fa0c7eff8a MultiLevelLogin1 database changes
git-svn-id: http://webgoat.googlecode.com/svn/trunk@309 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-09 12:02:15 +00:00
aa23f8169b Hint
git-svn-id: http://webgoat.googlecode.com/svn/trunk@308 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-09 11:54:02 +00:00
6119e33ccc Hint
git-svn-id: http://webgoat.googlecode.com/svn/trunk@307 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-09 11:52:03 +00:00
c4092d2669 Session Fixation
git-svn-id: http://webgoat.googlecode.com/svn/trunk@306 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-09 11:51:04 +00:00
ee6d8ad2d5 MultiLevel Login1 fix
git-svn-id: http://webgoat.googlecode.com/svn/trunk@305 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-09 11:49:56 +00:00
db7994052f Hints are declared now
git-svn-id: http://webgoat.googlecode.com/svn/trunk@304 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-08 11:40:36 +00:00
eabdc53709 MultiLevelLogin 2 data stored now in session
git-svn-id: http://webgoat.googlecode.com/svn/trunk@303 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-08 07:51:47 +00:00
aec76a30e4 MultiLevel Login 1 user name and so on now saved in the session
git-svn-id: http://webgoat.googlecode.com/svn/trunk@302 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-08 07:25:14 +00:00
82e32acb77 * Hints added
* Solutions added
* Bugfixes
* Introduction added (including how to start with webgoat and useful tools)
* New lesson: Password strength
* New lessons: Multi Level Login
* Not yet working new lesson: Session fixation (inital release)

git-svn-id: http://webgoat.googlecode.com/svn/trunk@301 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-07 14:28:38 +00:00
ce703bc67d Fix for Issue 5. Removed single ticks on hint for order by clause.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@295 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-04 12:54:36 +00:00
99ec50f096 Issue 6 Fix - Change netstat protocols to lower case to support unix. Some windows protocols will not work on unix.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@294 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-04-04 12:33:17 +00:00
841c995be7 Reformat of Java source. Added JavaStyle format definitions.
git-svn-id: http://webgoat.googlecode.com/svn/trunk@287 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-02-27 00:29:19 +00:00
80c1b16f3e Changed ExecuteQuery to executeUpdate to remove empty result set error which stopped the lesson from working for HSQLDB
git-svn-id: http://webgoat.googlecode.com/svn/trunk@276 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-02-05 21:24:20 +00:00
f7a19f534c Miscellaneous bug fixes
divide by zero, inaccurate discount and totals, reflection of user input


git-svn-id: http://webgoat.googlecode.com/svn/trunk@273 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-01-14 14:02:11 +00:00
72c18c5426 Removed space from " webgoat" directory name
git-svn-id: http://webgoat.googlecode.com/svn/trunk@272 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-01-12 17:42:01 +00:00