WebGoat

admin

Added client side validation to HiddenFieldTampering.java, added a new ECS makeButton with a OnClick function, corrected authorship in several files

2008-01-09 13:28:07 +00:00

CrossSiteScripting

Build cleanup in order to create a complete developer distribution. More menu cleanup

2008-01-03 21:09:17 +00:00

DBCrossSiteScripting

Update the DB lessons

2008-01-10 10:10:10 +00:00

DBSQLInjection

Update the DB lessons

2008-01-10 10:10:10 +00:00

GoatHillsFinancial

The return type fix got lost.

2007-07-11 13:40:01 +00:00

instructor

Update the DB lessons

2008-01-10 10:10:10 +00:00

RoleBasedAccessControl

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

SQLInjection

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

AbstractLesson.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

AccessControlMatrix.java

Build cleanup in order to create a complete developer distribution. More menu cleanup

2008-01-03 21:09:17 +00:00

BackDoors.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

BasicAuthentication.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

BlindSqlInjection.java

Added client side validation to HiddenFieldTampering.java, added a new ECS makeButton with a OnClick function, corrected authorship in several files

2008-01-09 13:28:07 +00:00

BufferOverflow.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

Category.java

Add a new Concurrency lesson

2008-01-10 10:08:45 +00:00

Challenge2Screen.java

Update the Challenge Stage 2 to be more realistic

2008-01-10 10:09:00 +00:00

CommandInjection.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

ConcurrencyCart.java

Add a new Concurrency lesson

2008-01-10 10:08:45 +00:00

CSRF.java

Build cleanup in order to create a complete developer distribution. More menu cleanup

2008-01-03 21:09:17 +00:00

DOMInjection.java

Use AbstractLesson.getLink() and getFormAction() more

2007-07-18 13:31:11 +00:00

DOS_Login.java

Added client side validation to HiddenFieldTampering.java, added a new ECS makeButton with a OnClick function, corrected authorship in several files

2008-01-09 13:28:07 +00:00

Encoding.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

FailOpenAuthentication.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

ForcedBrowsing.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

ForgotPassword.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

HiddenFieldTampering.java

Added client side validation to HiddenFieldTampering.java, added a new ECS makeButton with a OnClick function, corrected authorship in several files

2008-01-09 13:28:07 +00:00

HtmlClues.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

HttpBasics.java

Added client side validation to HiddenFieldTampering.java, added a new ECS makeButton with a OnClick function, corrected authorship in several files

2008-01-09 13:28:07 +00:00

HttpOnly.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

HttpSplitting.java

Extract the stage-related code from LessonTracker into SequentialLessonTracker

2007-07-11 12:50:32 +00:00

JavaScriptValidation.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

JSONInjection.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

LessonAdapter.java

Single platform build.xml

2007-10-08 20:37:43 +00:00

LogSpoofing.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

NewLesson.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

PathBasedAccessControl.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

Phishing.java

Added client side validation to HiddenFieldTampering.java, added a new ECS makeButton with a OnClick function, corrected authorship in several files

2008-01-09 13:28:07 +00:00

RandomLessonAdapter.java

Remove unnecessary setMessage() calls

2007-07-18 13:37:24 +00:00

ReflectedXSS.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

RemoteAdminFlaw.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

SequentialLessonAdapter.java

Mark SequentialLessonAdapter as abstract to prevent instantiation

2007-07-18 13:35:22 +00:00

SilentTransactions.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

SoapRequest.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

SqlNumericInjection.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

SqlStringInjection.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

StoredXss.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

ThreadSafetyProblem.java

Move the Thread Safety lesson into the Concurrency category

2008-01-10 10:09:13 +00:00

TraceXSS.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

UncheckedEmail.java

Added source parameter to "Show Java" for showing lesson source code. Added Google Mail configuration to UncheckedEmail lesson.

2008-01-08 12:51:13 +00:00

WeakAuthenticationCookie.java

Build cleanup in order to create a complete developer distribution. More menu cleanup

2008-01-03 21:09:17 +00:00

WeakSessionID.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

WelcomeScreen.java

Added some files required to build OWASP release.

2007-01-16 14:56:40 +00:00

WSDLScanning.java

Allow accessing Web Services when WebGoat is on a non-standard port

2008-01-10 10:09:27 +00:00

WsSAXInjection.java

Make it possible to return per-stage hints

2007-07-10 11:53:34 +00:00

WsSqlInjection.java

Allow WebGoat to create per-user databases

2007-07-18 13:34:14 +00:00

XMLInjection.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00

XPATHInjection.java

Menu cleanup for Lab stages. Shortened menu names for most lessons. Changed category naming to be more meaningful.

2008-01-02 13:48:19 +00:00