Nanne Baars
f91f77708a
New version
2017-11-02 21:44:30 +01:00
Nanne Baars
100876ad6c
Changed introduction
2017-11-02 20:44:21 +01:00
Nanne Baars
56fc0fce05
Added test for XXE
2017-11-02 20:41:30 +01:00
Nanne Baars
fc1353b2f1
Pom cleanup
2017-11-02 16:14:44 +01:00
Nanne Baars
1e9f92220d
Removed unnecessary JPA libraries
2017-11-02 15:44:45 +01:00
Nanne Baars
a11d3d0b1b
- Made movie little bit shorter because webgoat-server.jar was over 200Mb
...
- Movie was copy and pasted to csrf and auth lesson removed it from those lessons
- Made jars which are not necessary in the webgoat-server.jar optional
2017-11-02 15:39:49 +01:00
Nanne Baars
87a7521dcd
Adding introduction to WebGoat as the web interface opens with WebWolf which is confusing because people thought you needed to download WebWolf and start it directly. Feedback received during workshops
2017-11-02 14:28:20 +01:00
Nanne Baars
8729d9bfcf
Fixed minor issues for properties and starting WebGoat
2017-11-02 12:42:19 +01:00
Nanne Baars
bb3bc9b883
Releasing v8.0.0.M2
2017-10-18 22:36:58 +02:00
Nanne Baars
bb5e0c06dd
Directory can already exists
2017-10-18 22:26:46 +02:00
Nanne Baars
0508859cf5
Copy jar files to directory for Github release
2017-10-18 22:14:04 +02:00
Nanne Baars
738b2d8054
Skipping the clean-up while releasing to Github
2017-10-18 21:39:52 +02:00
Nanne Baars
0c88dcf463
Bug when passing version to Docker (v8.0 should be 8.0)
2017-10-18 21:08:59 +02:00
Nanne Baars
d1729e8f3c
Adding version number to Dockerfile as variable
2017-10-18 20:57:57 +02:00
Nanne Baars
1ecb43092d
Bumped version number
2017-10-18 19:58:14 +02:00
Nanne Baars
904a6b363d
Fixing Docker build
2017-10-18 19:52:57 +02:00
Nanne Baars
8250b4048f
Updating version number
2017-10-18 19:43:33 +02:00
Nanne Baars
839bdbd9e2
Forgot uncommenting Docker login command in script
2017-10-18 12:19:41 +02:00
Nanne Baars
42775c1980
Adding apt-get install of curl to Dockerfile
2017-10-18 12:07:56 +02:00
Nanne Baars
9e37a3e702
Adding Docker as service
2017-10-18 11:54:05 +02:00
Nanne Baars
3ee1a1ca16
Travis now builds Docker and create a Github release.
...
Removed ActiveMQ between WebGoat and WebWolf they now act as standalone applications
2017-10-18 10:54:16 +02:00
Nanne Baars
50543a9b55
Cleaning up test case logging
2017-10-13 23:14:47 +02:00
misfir3
994b181b8f
Merge pull request #393 from misfir3/develop
...
Typo fix for CSRF content
2017-10-13 10:34:40 -06:00
Jason White
49c3008fe2
Typo fix for CSRF content
2017-10-13 10:33:38 -06:00
misfir3
0fd704bb54
Merge pull request #392 from misfir3/develop
...
Image Cleanup for Http Proxies
2017-10-13 10:18:33 -06:00
Jason White
9e66ee177d
Image Cleanup for Http Proxies
2017-10-13 10:13:07 -06:00
misfir3
09742323b3
Merge pull request #391 from misfir3/develop
...
xss updates
2017-10-13 09:56:22 -06:00
misfir3
4e7034f6c1
Merge pull request #390 from misfir3/develop
...
csrf lesson update
2017-10-13 09:52:41 -06:00
Jason White
f9a43d0961
xss updates
2017-10-13 09:52:19 -06:00
Jason White
8d488c6ac6
More CSRF Updates
2017-10-13 09:28:41 -06:00
Jason White
b03a32f92c
update to do CSRF-based comment forging
2017-10-12 18:17:48 -06:00
Jason White
d0ec84e9a6
Merge remote-tracking branch 'upstream/develop' into develop
2017-10-11 20:29:47 -06:00
Jason White
17e122b914
adding .DS_Store to .gitignore
2017-10-11 20:28:36 -06:00
Jason White
b156d81535
Initial cut on CSRF. More to come
2017-10-11 20:06:57 -06:00
Nanne Baars
5033c3661a
Cleaning up test case logging
2017-10-08 02:07:22 +02:00
Nanne Baars
6cb526aa43
Maven build generates too much output for Travis CI
2017-10-08 01:58:03 +02:00
Nanne Baars
14b188597a
Maven build generates too much output for Travis CI
2017-10-07 19:27:53 +02:00
Nanne Baars
8a982dedb5
Updated XXE lesson so it also uses WebWolf
2017-10-07 13:46:34 +02:00
Nanne Baars
94caba7eb1
Landing page incoming requests now look whether the referer is WebGoat (all incoming requests from WebGoat will now be logged)
2017-09-13 00:22:52 +02:00
Nanne Baars
109fe2c438
Added WebWolf to Docker
2017-09-12 23:44:32 +02:00
Nanne Baars
46c536554c
- Added new challenges
...
- Added new webapplication called WebWolf to make attacks more realistic
- Added WebWolf lesson to explain the concepts behind this new application
2017-09-12 23:12:10 +02:00
Nanne Baars
56f19caed6
#380 Download mongodb while building the Docker image. If you are behind a proxy (or no connection) during the start of WebGoat you might not be able to download the mongodb binary.
2017-08-15 08:15:44 +02:00
misfir3
6a440a93c0
Merge pull request #379 from misfir3/missing-function-level-ac
...
Missing function level ac
2017-08-09 00:29:31 -06:00
Jason White
ec2ab55749
fixing test directory structure
2017-08-09 00:24:04 -06:00
Jason White
2463f534b5
Formatting and bumping file in test dir
2017-08-09 00:19:34 -06:00
misfir3
51c9363162
Merge pull request #378 from misfir3/missing-function-level-ac
...
Missing function level ac
2017-08-09 00:10:22 -06:00
Jason White
8f740ace73
additional tests, one fix
2017-08-08 23:56:43 -06:00
Jason White
476ab415a4
More tests for AC lesson
2017-08-08 18:47:49 -06:00
Jason White
b8d17a1cfd
Basic endpoint tests added
2017-08-08 18:06:18 -06:00
Jason White
b41751a55c
missing function level ac working again ... after VM implosion
2017-08-08 17:15:20 -06:00
