dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
WebGoat/webgoat/main/project/WebContent/lesson_solutions
History
cam.morris 85c6843ee4 This change includes two additional CSRF lessons. One for 
by-passing a prompt (showing why prompts don't work).  The second for
by-passing CSRF tokens when XSS exists. 

It also modifies the existing CSRF lesson so that the lesson
can be extended and used by the two new lessons.


git-svn-id: http://webgoat.googlecode.com/svn/trunk@386 4033779f-a91e-0410-96ef-6bf7bf53c507
2009-10-23 21:23:17 +00:00
..
AccessControlMatrix_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
BackDoors_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
BasicAuthentication_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
BlindSqlInjection_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
ClientSideFiltering_files
* Hints added
2008-04-07 14:28:38 +00:00
ClientSideValidation_files
* Hints added
2008-04-07 14:28:38 +00:00
CommandInjection_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
ConcurrencyCart_files
* Hints added
2008-04-07 14:28:38 +00:00
CSRF_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
CsrfPromptByPass_files
This change includes two additional CSRF lessons. One for
2009-10-23 21:23:17 +00:00
CsrfTokenByPass_files
This change includes two additional CSRF lessons. One for
2009-10-23 21:23:17 +00:00
DOMInjection_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
DOMXSS_files
* Hints added
2008-04-07 14:28:38 +00:00
DOS_Login_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
FailOpenAuthentication_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
ForcedBrowsing_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
ForgotPassword_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
HiddenFieldTampering_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
HtmlClues_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
HttpBasics_files
* Hints added
2008-04-07 14:28:38 +00:00
HttpOnly_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
HttpSplitting_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
InsecureLogin_files
InsecureLogin solution edited
2008-04-14 08:33:30 +00:00
JavaScriptValidation_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
JSONInjection_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
Lab Access Control
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
Lab SQL Injection
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
Lab XSS
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
LogSpoofing_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
MultiLevelLogin1_files
solution for MultiLevelLogin1 altered
2008-04-13 11:54:42 +00:00
MultiLevelLogin2_files
Solution changed. Figure added
2008-04-13 22:18:33 +00:00
PasswordStrength_files
* Hints added
2008-04-07 14:28:38 +00:00
PathBasedAccessControl_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
ReflectedXSS_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
RemoteAdminFlaw_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
SessionFixation_files
Solution for Session Fixation added
2008-04-10 08:50:36 +00:00
SilentTransactions_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
SoapRequest_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
SqlNumericInjection_files
* Hints added
2008-04-07 14:28:38 +00:00
SqlStringInjection_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
StoredXSS_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
ThreadSafetyProblem_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
TraceXSS_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
UncheckedEmail_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
WeakAuthenticationCookie_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
WeakSessionID_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
WSDLScanning_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
WsSAXInjection_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
WsSqlInjection_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
XMLInjection_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
XPATHInjection_files
Removed space from " webgoat" directory name
2008-01-12 17:42:01 +00:00
AccessControlMatrix.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
BackDoors.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
BasicAuthentication.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
BlindSqlInjection.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
ClientSideFiltering.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
ClientSideValidation.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
CommandInjection.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
ConcurrencyCart.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
CSRF.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
CsrfPromptByPass.html
This change includes two additional CSRF lessons. One for
2009-10-23 21:23:17 +00:00
CsrfTokenByPass.html
This change includes two additional CSRF lessons. One for
2009-10-23 21:23:17 +00:00
DangerousEval.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
DOMInjection.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
DOMXSS.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
DOS_Login.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
Encoding.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
FailOpenAuthentication.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
ForcedBrowsing.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
ForgotPassword.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
formate.css
* Hints added
2008-04-07 14:28:38 +00:00
HiddenFieldTampering.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
HtmlClues.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
HttpBasics.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
HttpOnly.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
HttpSplitting.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
InsecureLogin.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
JavaScriptValidation.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
JSONInjection.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
LogSpoofing.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
MultiLevelLogin1.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
MultiLevelLogin2.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
PasswordStrength.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
PathBasedAccessControl.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
Phishing.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
ReflectedXSS.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
RemoteAdminFlaw.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
SessionFixation.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
SilentTransactions.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
SoapRequest.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
SqlNumericInjection.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
SqlStringInjection.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
StoredXss.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
ThreadSafetyProblem.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
TraceXSS.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
UncheckedEmail.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
WeakAuthenticationCookie.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
WeakSessionID.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
WSDLScanning.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
WsSAXInjection.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
WsSqlInjection.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
XMLInjection.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00
XPATHInjection.html
Removed hardcoded webgoat path for URLs
2008-11-21 16:57:23 +00:00