WebGoat

admin

corrected spelling and some formatting

2008-08-11 14:39:09 +00:00

ClientSideFiltering

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

CrossSiteScripting

Minor syntax issue with the word prename in the instructions - reported by April King

2008-12-10 23:52:04 +00:00

DBCrossSiteScripting

some cleanup, and removing unneeded ClassNotFoundExceptions

2008-08-12 14:33:22 +00:00

DBSQLInjection

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

GoatHillsFinancial

some cleanup, and removing unneeded ClassNotFoundExceptions

2008-08-12 14:33:22 +00:00

instructor

corrected spelling and some formatting

2008-08-11 14:39:09 +00:00

RoleBasedAccessControl

Lots of wording changes and HTML fixes.

2009-01-06 21:06:42 +00:00

SQLInjection

some cleanup, and removing unneeded ClassNotFoundExceptions

2008-08-12 14:33:22 +00:00

AbstractLesson.java

A first attempt at internationalization of WebGoat. For complete internationalization WebGoat needs two things:

2009-10-26 15:58:15 +00:00

AccessControlMatrix.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00

BackDoors.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

BasicAuthentication.java

A first attempt at internationalization of WebGoat. For complete internationalization WebGoat needs two things:

2009-10-26 15:58:15 +00:00

BlindNumericSqlInjection.java

Three new lessons and supporting files and changes to other files. Some changes to other files may not be quite the "right" way to accomplish my goal, so they may need to be updated. I deleted the old BlindSQLInjection lesson (which was by me) since it is replaced by the two new lessons for BlindNumericSqlInjection and BlindStringSqlInjection. Other new lesson is for MaliciousFileExecution, which requires the Apache Commons fileupload library (which in turn needs the commons io library).

2009-10-20 04:30:00 +00:00

BlindScript.java

Malcode samples - need to turn into lessons

2009-10-26 11:24:12 +00:00

BlindStringSqlInjection.java

Three new lessons and supporting files and changes to other files. Some changes to other files may not be quite the "right" way to accomplish my goal, so they may need to be updated. I deleted the old BlindSQLInjection lesson (which was by me) since it is replaced by the two new lessons for BlindNumericSqlInjection and BlindStringSqlInjection. Other new lesson is for MaliciousFileExecution, which requires the Apache Commons fileupload library (which in turn needs the commons io library).

2009-10-20 04:30:00 +00:00

BufferOverflow.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00

BypassHtmlFieldRestrictions.java

Added 3 new lessons. Some strings are in the properties files, but not all. Modified CreateDB.java in order to create a new salaries table used by the new SQL injection lessons.

2009-10-30 04:53:19 +00:00

Category.java

Three new lessons and supporting files and changes to other files. Some changes to other files may not be quite the "right" way to accomplish my goal, so they may need to be updated. I deleted the old BlindSQLInjection lesson (which was by me) since it is replaced by the two new lessons for BlindNumericSqlInjection and BlindStringSqlInjection. Other new lesson is for MaliciousFileExecution, which requires the Apache Commons fileupload library (which in turn needs the commons io library).

2009-10-20 04:30:00 +00:00

Challenge2Screen.java

Malcode samples - need to turn into lessons

2009-10-26 11:24:12 +00:00

ClientSideValidation.java

minor changes and improving display issues

2008-08-12 17:36:30 +00:00

CommandInjection.java

A first attempt at internationalization of WebGoat. For complete internationalization WebGoat needs two things:

2009-10-26 15:58:15 +00:00

ConcurrencyCart.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

CSRF.java

This change includes two additional CSRF lessons. One for

2009-10-23 21:23:17 +00:00

CsrfPromptByPass.java

Including one small documentation change: giving credit to Sherif Koussa's original CSRF lesson

2009-10-23 21:29:42 +00:00

CsrfTokenByPass.java

Including one small documentation change: giving credit to Sherif Koussa's original CSRF lesson

2009-10-23 21:29:42 +00:00

DangerousEval.java

corrected spelling and some formatting

2008-08-11 14:39:09 +00:00

DOMInjection.java

Changes by Chris Roe to fix lesson issues with FireFox.

2008-12-17 13:06:29 +00:00

DOMXSS.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

DOS_Login.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00

Encoding.java

minor changes and improving display issues

2008-08-12 17:36:30 +00:00

FailOpenAuthentication.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00

ForcedBrowsing.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00

ForgotPassword.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00

HiddenFieldTampering.java

A first attempt at internationalization of WebGoat. For complete internationalization WebGoat needs two things:

2009-10-26 15:58:15 +00:00

HowToWork.java

Minor 5.2 changes.

2008-05-13 03:44:40 +00:00

HtmlClues.java

A first attempt at internationalization of WebGoat. For complete internationalization WebGoat needs two things:

2009-10-26 15:58:15 +00:00

HttpBasics.java

A first attempt at internationalization of WebGoat. For complete internationalization WebGoat needs two things:

2009-10-26 15:58:15 +00:00

HttpOnly.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

HttpSplitting.java

fixed a typo

2008-12-11 21:15:20 +00:00

InsecureLogin.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

JavaScriptValidation.java

A first attempt at internationalization of WebGoat. For complete internationalization WebGoat needs two things:

2009-10-26 15:58:15 +00:00

JSONInjection.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00

LessonAdapter.java

A first attempt at internationalization of WebGoat. For complete internationalization WebGoat needs two things:

2009-10-26 15:58:15 +00:00

LogSpoofing.java

A first attempt at internationalization of WebGoat. For complete internationalization WebGoat needs two things:

2009-10-26 15:58:15 +00:00

MaliciousFileExecution.java

Three new lessons and supporting files and changes to other files. Some changes to other files may not be quite the "right" way to accomplish my goal, so they may need to be updated. I deleted the old BlindSQLInjection lesson (which was by me) since it is replaced by the two new lessons for BlindNumericSqlInjection and BlindStringSqlInjection. Other new lesson is for MaliciousFileExecution, which requires the Apache Commons fileupload library (which in turn needs the commons io library).

2009-10-20 04:30:00 +00:00

MultiLevelLogin1.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

MultiLevelLogin2.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

NewLesson.java

* Hints added

2008-04-07 14:28:38 +00:00

PasswordStrength.java

Minor fixes

2008-04-14 12:03:55 +00:00

PathBasedAccessControl.java

A first attempt at internationalization of WebGoat. For complete internationalization WebGoat needs two things:

2009-10-26 15:58:15 +00:00

Phishing.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

RandomLessonAdapter.java

minor bug fixes and enhancements, including proper dollar value formatting

2008-08-14 14:31:17 +00:00

ReflectedXSS.java

A first attempt at internationalization of WebGoat. For complete internationalization WebGoat needs two things:

2009-10-26 15:58:15 +00:00

RemoteAdminFlaw.java

A first attempt at internationalization of WebGoat. For complete internationalization WebGoat needs two things:

2009-10-26 15:58:15 +00:00

SameOriginPolicyProtection.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

SequentialLessonAdapter.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

SessionFixation.java

minor bug fixes and enhancements, including proper dollar value formatting

2008-08-14 14:31:17 +00:00

SilentTransactions.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00

SoapRequest.java

minor bug fixes and enhancements, including proper dollar value formatting

2008-08-14 14:31:17 +00:00

SqlAddData.java

Added 3 new lessons. Some strings are in the properties files, but not all. Modified CreateDB.java in order to create a new salaries table used by the new SQL injection lessons.

2009-10-30 04:53:19 +00:00

SqlModifyData.java

Added 3 new lessons. Some strings are in the properties files, but not all. Modified CreateDB.java in order to create a new salaries table used by the new SQL injection lessons.

2009-10-30 04:53:19 +00:00

SqlNumericInjection.java

A first attempt at internationalization of WebGoat. For complete internationalization WebGoat needs two things:

2009-10-26 15:58:15 +00:00

SqlStringInjection.java

A first attempt at internationalization of WebGoat. For complete internationalization WebGoat needs two things:

2009-10-26 15:58:15 +00:00

StoredXss.java

A first attempt at internationalization of WebGoat. For complete internationalization WebGoat needs two things:

2009-10-26 15:58:15 +00:00

ThreadSafetyProblem.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

TomcatSetup.java

SessionFixation and TomcatSetup edited

2008-04-14 07:50:12 +00:00

TraceXSS.java

corrected spelling and some formatting

2008-08-11 14:39:09 +00:00

UncheckedEmail.java

minor bug fixes and enhancements, including proper dollar value formatting

2008-08-14 14:31:17 +00:00

UsefulTools.java

* Hints added

2008-04-07 14:28:38 +00:00

WeakAuthenticationCookie.java

A first attempt at internationalization of WebGoat. For complete internationalization WebGoat needs two things:

2009-10-26 15:58:15 +00:00

WeakSessionID.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00

WelcomeScreen.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

WSDLScanning.java

Removed hardcoded webgoat path for URLs

2008-11-21 16:57:23 +00:00

WsSAXInjection.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

WsSqlInjection.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

XMLInjection.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00

XPATHInjection.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00