Commit Graph

103 Commits

Author SHA1 Message Date
9be4361afc New release, updating pom.xml 2019-01-18 08:37:26 +01:00
ed490a5ecf Fix for #545
Introduced new macro to make a clear distinction between /WebWolf with
context root and without.
2019-01-16 11:07:30 +01:00
ec225558b9 Move to latest Spring Boot version and move to Java 11 2018-12-15 13:59:54 +01:00
bf45a0a8e5 Fix for XXE docs 2018-12-14 12:43:19 +01:00
1252e3dc21 Update instructions to use docker-compose only 2018-07-17 20:17:35 +02:00
651698d96c Add different solution for XXE attack 2018-06-21 07:17:27 +02:00
ac12a009e4 New release v8.0.0.M20 2018-06-20 18:05:59 +02:00
9dd93d88d9 New release v8.0.0.M19 2018-06-20 16:40:28 +02:00
26aa72e721 New release 2018-05-30 20:54:13 +02:00
c510bd9bf1 New develop version 2018-05-30 20:37:25 +02:00
c7a714a590 Move to next release 2018-05-30 17:05:50 +02:00
ecb7688e08 Update to new version for develop
Move WebWolf to port 9090 easier since most of the time something is running on 8081
Add scripts for easy building Docker files etc
2018-05-30 13:17:05 +02:00
55793dd153 New release v8.0.0.M15 2018-05-27 20:54:50 +02:00
1edceb0aa8 Extended and fixed some lessons 2018-05-27 20:37:44 +02:00
d2b6725f3b Moved challenge2 to client-side-filtering as final assignment 2018-05-27 12:41:52 +02:00
8050a2b56d XXE lesson not showing correct link for WebWolf 2018-05-01 21:54:28 +02:00
11ffa5702c Added "WebWolf" enabled to the lessons which support the usage of WebWolf 2018-04-29 15:02:19 +02:00
e4ca0c4836 Make report working again 2018-04-27 19:26:01 +02:00
245ba2c3d1 Fix XXE lesson, the exact .webgoat directory including version number will be put in the lesson. 2018-04-24 20:44:05 +02:00
f30db3abfc New version number 2018-04-11 20:45:12 +02:00
568fa82270 fixed ContentTypeAssignment and SimpleXXE to work with MacOSX 2018-01-13 16:00:11 +00:00
75d0405da1 Fixed XXE lesson the posting of the comments did not show up directly only after page refresh 2017-11-17 07:07:43 +01:00
f91f77708a New version 2017-11-02 21:44:30 +01:00
56fc0fce05 Added test for XXE 2017-11-02 20:41:30 +01:00
fc1353b2f1 Pom cleanup 2017-11-02 16:14:44 +01:00
1ecb43092d Bumped version number 2017-10-18 19:58:14 +02:00
8250b4048f Updating version number 2017-10-18 19:43:33 +02:00
5033c3661a Cleaning up test case logging 2017-10-08 02:07:22 +02:00
8a982dedb5 Updated XXE lesson so it also uses WebWolf 2017-10-07 13:46:34 +02:00
0cb4faf15f refactor to support cleaner scoping && success and failure callbacks 2017-07-18 17:39:58 -04:00
36ad73c800 Added more mitigations for XXE 2017-06-15 23:36:51 +02:00
99f75a835c #359 Fixed 2017-06-12 20:02:21 +02:00
52a48df70c XXE successfully completed message was no longer shown, fixed it by using form POST together with customjs functions.
Introduced callback functionality which you can specify after the posting in order to be able to load the comments list again.
2017-06-12 15:08:55 +02:00
19a4859e4f Fix hint not being display correctly due to missing escaping 2017-06-12 13:03:14 +02:00
129e9deba9 Added testcase for SQL injection lesson 2017-05-21 16:40:52 +02:00
0ad1f0d147 Fixing Travis issues while building 2017-05-21 13:28:29 +02:00
edea515564 Test failed due to hardcoded path 2017-05-21 12:46:10 +02:00
877de6ebd4 Updated XXE lessons with challenge screens 2017-05-21 12:24:42 +02:00
6f0f71b131 Changed XXE lessons to use photo comment example 2017-05-04 06:25:11 +02:00
4a061f61a6 Integrated XXE assigment from CTF to XXE lesson 2017-05-04 02:25:56 +02:00
cebf74cd10 Challenge 3: First setup completed 2017-04-15 11:37:43 +02:00
98000d6002 Fixing links in several lessons 2017-03-23 09:41:01 +01:00
259fd19c1b - Introduced user registration
- Now using Spring Boot for classloading, this way local development does not need to restart the complete server
- Fixed all kinds of dependencies on the names of the lessons necessary to keep in mind during the creation of a lesson.
- Simplied loading of resources, by adding resource mappings in MvcConfig.
- Refactored plugin loading, now only one class is left for loading the lessons.
2017-03-22 11:35:14 +01:00
ee5a12d205 Provide Server-side service to support UI localization #265 (#322)
merging
2017-01-31 11:52:33 -05:00
ac16342c17 #315 Adding UI handling and corresponding expected elements for html files for decoration. Inlucdes minor refactor 2017-01-25 17:46:31 +01:00
0779f7a3d0 Hints per lesson (#314)
Squashing and merging ...

* Each assigment should have the options to have its own set of hints #278

* Updating lessons due to changes from #278

* Enable i18n client side #312

* IDOR move hints to assignment and enable i18n #312
2017-01-24 09:34:06 -05:00
9c03b6f63b #276 Automatic lesson summary page
- Basic overview of all the assignments needed to be solved in a lesson
 - Clicking on a link will jump to the correct page with the assignment
 - Lesson completed also updates lesson overview immediately
2016-12-28 10:14:34 +01:00
1a854a500e Lesson overview 2016-11-29 20:27:54 +01:00
5347311319 XXE last assignment completely working 2016-11-23 17:09:35 +01:00
2647722842 fixing typo 2016-11-21 13:50:21 -05:00