|
|
6b4a488c8c
|
Users shared now between WebGoat and WebWolf by starting HSQLDB
as standalone database
|
2018-05-01 22:00:07 +02:00 |
|
|
|
8050a2b56d
|
XXE lesson not showing correct link for WebWolf
|
2018-05-01 21:54:28 +02:00 |
|
|
|
11ffa5702c
|
Added "WebWolf" enabled to the lessons which support the usage of WebWolf
|
2018-04-29 15:02:19 +02:00 |
|
|
|
e4ca0c4836
|
Make report working again
|
2018-04-27 19:26:01 +02:00 |
|
|
|
e422da4c64
|
Polling for lesson updates (updates the menu and page navigation)
|
2018-04-27 18:50:13 +02:00 |
|
|
|
245ba2c3d1
|
Fix XXE lesson, the exact .webgoat directory including version number will be put in the lesson.
|
2018-04-24 20:44:05 +02:00 |
|
|
|
672d78eebc
|
Resource bundle in UTF-8
|
2018-04-23 16:12:50 +02:00 |
|
|
|
98efc1235f
|
By default binds to ALL network interfaces #431
|
2018-01-29 15:32:02 +01:00 |
|
|
|
b99b554522
|
Version: docker 8.0.0.M9 Multiple users can't finalize the same lesson #432
|
2018-01-29 15:29:48 +01:00 |
|
|
|
04ccf9a422
|
New release should create a new webgoat directory with version tag inside #423
|
2018-01-21 17:46:43 +01:00 |
|
|
|
ee11381a63
|
Fixed database issue mappings
|
2018-01-21 17:13:28 +01:00 |
|
|
|
2cc6c232e2
|
Added macro for asciidoc to produce the WebWolf link dynamically depending on configuration
|
2018-01-15 20:56:59 +01:00 |
|
|
|
a6b9235711
|
SQL Error '-104' in XSS Lesson Page 7 #416
|
2018-01-10 12:48:45 +01:00 |
|
|
|
05d8b590f3
|
Merge tag '8.0.0' into develop
Release 8.0.0
|
2017-12-30 16:52:24 +01:00 |
|
|
|
c6e86861fe
|
Removed Mongodb, so we do not have issues with downloading the embedded Mongodb. Moved back to JPA and use HSQLDB for storing user information.
|
2017-12-29 22:12:21 +01:00 |
|
|
|
dd7f4074cd
|
Added encoding for asciidoc
|
2017-12-28 00:16:16 +01:00 |
|
|
|
43b82027f5
|
Added more content for CSRF lesson
|
2017-11-22 01:34:05 +01:00 |
|
|
|
5eed385d5d
|
When an adoc file cannot be found the complete lesson crashed, made it failsafe with a logging statement.
|
2017-11-17 07:08:24 +01:00 |
|
|
|
157b982394
|
successFunction and failureFunction were selected by using the main form (so the succesFunction of the first assignment was used for the next assignment) not the currentForm we determined in onFormSubmit() function.
|
2017-11-17 07:06:56 +01:00 |
|
|
|
6c91e7dc8a
|
Fixed WebWolf issues with sending e-mails
|
2017-11-15 11:58:31 +01:00 |
|
|
|
fc1353b2f1
|
Pom cleanup
|
2017-11-02 16:14:44 +01:00 |
|
|
|
8729d9bfcf
|
Fixed minor issues for properties and starting WebGoat
|
2017-11-02 12:42:19 +01:00 |
|
|
|
24cf806787
|
more hints/helps cleanup
|
2017-10-25 18:05:08 -06:00 |
|
|
|
c6f1c5cd2a
|
#351 - using listenToOnce to get rid of redundant calls
|
2017-10-25 17:11:54 -06:00 |
|
|
|
3ee1a1ca16
|
Travis now builds Docker and create a Github release.
Removed ActiveMQ between WebGoat and WebWolf they now act as standalone applications
|
2017-10-18 10:54:16 +02:00 |
|
|
|
d0ec84e9a6
|
Merge remote-tracking branch 'upstream/develop' into develop
|
2017-10-11 20:29:47 -06:00 |
|
|
|
b156d81535
|
Initial cut on CSRF. More to come
|
2017-10-11 20:06:57 -06:00 |
|
|
|
5033c3661a
|
Cleaning up test case logging
|
2017-10-08 02:07:22 +02:00 |
|
|
|
8a982dedb5
|
Updated XXE lesson so it also uses WebWolf
|
2017-10-07 13:46:34 +02:00 |
|
|
|
46c536554c
|
- Added new challenges
- Added new webapplication called WebWolf to make attacks more realistic
- Added WebWolf lesson to explain the concepts behind this new application
|
2017-09-12 23:12:10 +02:00 |
|
|
|
b41751a55c
|
missing function level ac working again ... after VM implosion
|
2017-08-08 17:15:20 -06:00 |
|
|
|
8df1d53471
|
interim missing function ac commit, traversing dev. env.
|
2017-08-08 09:28:09 -06:00 |
|
|
|
f1a104f0ab
|
merging missing function-level-ac lesson
|
2017-07-25 09:44:10 -04:00 |
|
|
|
8186bd4766
|
css and xss updates
|
2017-07-24 18:05:57 -04:00 |
|
|
|
c44186f986
|
start of missing function ac lesson
|
2017-07-24 16:26:23 -04:00 |
|
|
|
ca4b0c06b5
|
lesson css file
|
2017-07-24 11:34:10 -04:00 |
|
|
|
dce962bdeb
|
Updating Category ordering, closer to T10
|
2017-07-19 15:54:50 -04:00 |
|
|
|
0cb4faf15f
|
refactor to support cleaner scoping && success and failure callbacks
|
2017-07-18 17:39:58 -04:00 |
|
|
|
fb65534355
|
Merging from 'injection-updates' into local develop branch
|
2017-07-03 15:22:02 -04:00 |
|
|
|
2e4e4ea716
|
including restart lesson fix for lesson overview
|
2017-07-03 12:37:15 -04:00 |
|
|
|
daaf361dd2
|
Lesson Overview updates
|
2017-07-03 12:14:01 -04:00 |
|
|
|
89e2fc109c
|
Work-around to handle special chars in action ... currently to be able to match {userId} in hint creation/assignment for IDOR
|
2017-06-27 10:24:38 -04:00 |
|
|
|
dd18e68660
|
merge of upstream, conflict resolution
|
2017-06-27 08:30:58 -04:00 |
|
|
|
ccb4e3813b
|
#353 - lesson template/guide
|
2017-06-23 14:46:09 -04:00 |
|
|
|
7809057208
|
Enabled the challenges again to make them visible for everybody who starts WebGoat
|
2017-06-15 23:38:04 +02:00 |
|
|
|
e9ad20cb30
|
Make sure we clean all the files below the .webgoat dir
|
2017-06-15 19:08:19 +02:00 |
|
|
|
a484467419
|
Adding extra lesson for order by clauses
|
2017-06-15 19:08:19 +02:00 |
|
|
|
b048988d2f
|
Changed layout of the html tampering lesson and fixed some JavaScript issues. Added a small mitigation page.
Moved the lessons concerning client side validation to client side category
|
2017-06-13 03:22:19 +02:00 |
|
|
|
52a48df70c
|
XXE successfully completed message was no longer shown, fixed it by using form POST together with customjs functions.
Introduced callback functionality which you can specify after the posting in order to be able to load the comments list again.
|
2017-06-12 15:08:55 +02:00 |
|
|
|
129e9deba9
|
Added testcase for SQL injection lesson
|
2017-05-21 16:40:52 +02:00 |
|
