<%@ page contentType="text/html; charset=ISO-8859-1" language="java" errorPage=""%> <%@page import="org.owasp.webgoat.session.WebSession"%> <% WebSession webSession = ((WebSession) session.getAttribute("websession")); %> WebGoat V5.4

Thank you for using WebGoat! This program is a demonstration of common web application flaws. The exercises are intended to provide hands on experience with application penetration testing techniques.

The WebGoat project is led by Bruce Mayhew. Please send all comments to Bruce at <%=webSession.getWebgoatContext().getFeedbackAddress()%>.

OWASP Foundation
Aspect Security
WebGoat Authors
Bruce Mayhew
Jeff Williams

WebGoat Design Team

V5.4 Lesson Contributers
David Anderson
Laurence Casey (Graphics)
Rogan Dawes
Bruce Mayhew
Sherif Koussa
Yiannis Pavlosoglou
Special Thanks for V5.4
Documentation Contributers
Brian Ciomei (Multitude of bug fixes)
To all who have sent comments
 
 
 
 
WARNING
While running this program, your machine is extremely vulnerable to attack if you are not running on localhost. If you are NOT running on localhost (default configuration), You should disconnect from the network while using this program.

This program is for educational purposes only. Use of these techniques without permission could lead to job termination, financial liability, and/or criminal penalties.