WebGoat

admin

Fix database connetion handling.

2008-01-10 10:11:12 +00:00

ClientSideFiltering

making ajax impovements

2008-01-10 10:44:09 +00:00

CrossSiteScripting

Change UpdateProfile to always use a PreparedStatement, to avoid SQL Injection attacks

2008-01-10 10:49:12 +00:00

DBCrossSiteScripting

Change UpdateProfile to always use a PreparedStatement, to avoid SQL Injection attacks

2008-01-10 10:49:12 +00:00

DBSQLInjection

Change DBSQLInjection lesson to count the matched rows

2008-01-10 10:13:13 +00:00

GoatHillsFinancial

Change UpdateProfile to always use a PreparedStatement, to avoid SQL Injection attacks

2008-01-10 10:49:12 +00:00

instructor

Change UpdateProfile to always use a PreparedStatement, to avoid SQL Injection attacks

2008-01-10 10:49:12 +00:00

RoleBasedAccessControl

Change UpdateProfile to always use a PreparedStatement, to avoid SQL Injection attacks

2008-01-10 10:49:12 +00:00

SQLInjection

Fix a hint to refer to the right field

2008-01-10 10:51:43 +00:00

AbstractLesson.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

AccessControlMatrix.java

Build cleanup in order to create a complete developer distribution. More menu cleanup

2008-01-03 21:09:17 +00:00

BackDoors.java

Fix database connetion handling.

2008-01-10 10:11:12 +00:00

BasicAuthentication.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

BlindSqlInjection.java

Fix database connetion handling.

2008-01-10 10:11:12 +00:00

BufferOverflow.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

Category.java

Add a new Concurrency lesson

2008-01-10 10:08:45 +00:00

Challenge2Screen.java

Fix database connetion handling.

2008-01-10 10:11:12 +00:00

ClientSideValidation.java

minor changes

2008-01-10 10:48:01 +00:00

CommandInjection.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

ConcurrencyCart.java

Remove an unnecessary printStackTrace()

2008-01-10 20:21:10 +00:00

CSRF.java

Fix database connetion handling.

2008-01-10 10:11:12 +00:00

DangerousEval.java

cleaning up a bit

2008-01-10 10:47:33 +00:00

DOMInjection.java

Use AbstractLesson.getLink() and getFormAction() more

2007-07-18 13:31:11 +00:00

DOMXSS.java

minor changes

2008-01-10 10:48:01 +00:00

DOS_Login.java

Fix database connetion handling.

2008-01-10 10:11:12 +00:00

Encoding.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

FailOpenAuthentication.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

ForcedBrowsing.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

ForgotPassword.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

HiddenFieldTampering.java

Added client side validation to HiddenFieldTampering.java, added a new ECS makeButton with a OnClick function, corrected authorship in several files

2008-01-09 13:28:07 +00:00

HtmlClues.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

HttpBasics.java

Added client side validation to HiddenFieldTampering.java, added a new ECS makeButton with a OnClick function, corrected authorship in several files

2008-01-09 13:28:07 +00:00

HttpOnly.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

HttpSplitting.java

Extract the stage-related code from LessonTracker into SequentialLessonTracker

2007-07-11 12:50:32 +00:00

JavaScriptValidation.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

JSONInjection.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

LessonAdapter.java

Single platform build.xml

2007-10-08 20:37:43 +00:00

LogSpoofing.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

NewLesson.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

PathBasedAccessControl.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

Phishing.java

Added hint about extra "." in http://localhost./

2008-01-10 17:39:07 +00:00

RandomLessonAdapter.java

Remove unnecessary setMessage() calls

2007-07-18 13:37:24 +00:00

ReflectedXSS.java

Merge with major changes made by Aspect

2008-01-10 10:12:31 +00:00

RemoteAdminFlaw.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

SameOriginPolicyProtection.java

adding XHR lesson

2008-01-10 10:46:57 +00:00

SequentialLessonAdapter.java

Mark SequentialLessonAdapter as abstract to prevent instantiation

2007-07-18 13:35:22 +00:00

SilentTransactions.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

SoapRequest.java

Add a link to the WSDL file in the 3rd stage of SOAPRequest

2008-01-10 10:52:02 +00:00

SqlNumericInjection.java

Fix database connetion handling.

2008-01-10 10:11:12 +00:00

SqlStringInjection.java

Fix database connetion handling.

2008-01-10 10:11:12 +00:00

StoredXss.java

Fix database connetion handling.

2008-01-10 10:11:12 +00:00

ThreadSafetyProblem.java

Fix database connetion handling.

2008-01-10 10:11:12 +00:00

TraceXSS.java

Merge with major changes made by Aspect

2008-01-10 10:12:31 +00:00

UncheckedEmail.java

Added source parameter to "Show Java" for showing lesson source code. Added Google Mail configuration to UncheckedEmail lesson.

2008-01-08 12:51:13 +00:00

WeakAuthenticationCookie.java

Build cleanup in order to create a complete developer distribution. More menu cleanup

2008-01-03 21:09:17 +00:00

WeakSessionID.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

WelcomeScreen.java

Added some files required to build OWASP release.

2007-01-16 14:56:40 +00:00

WSDLScanning.java

Fix database connetion handling.

2008-01-10 10:11:12 +00:00

WsSAXInjection.java

Make it possible to return per-stage hints

2007-07-10 11:53:34 +00:00

WsSqlInjection.java

Fix database connetion handling.

2008-01-10 10:11:12 +00:00

XMLInjection.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

XPATHInjection.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00