139 lines
		
	
	
		
			7.2 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
			
		
		
	
	
			139 lines
		
	
	
		
			7.2 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
<%@ page contentType="text/html; charset=ISO-8859-1" language="java"
 | 
						|
         errorPage=""%>
 | 
						|
<%@page import="org.owasp.webgoat.session.WebSession"%>
 | 
						|
<%
 | 
						|
    //WebSession webSession = ((WebSession) session.getAttribute("websession"));
 | 
						|
%>
 | 
						|
 | 
						|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
 | 
						|
<html xmlns="http://www.w3.org/1999/xhtml">
 | 
						|
    <head>
 | 
						|
        <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />
 | 
						|
        <title>WebGoat V5.4</title>
 | 
						|
        <link rel="stylesheet" href="css/webgoat.css" type="text/css" />
 | 
						|
    </head>
 | 
						|
 | 
						|
    <body>
 | 
						|
 | 
						|
        <div id="wrap">
 | 
						|
            <div id="top"></div>
 | 
						|
            <div id="start">
 | 
						|
                <p>Thank you for using WebGoat! This program is a demonstration of common web application flaws.
 | 
						|
                    The exercises are intended to provide hands on experience with
 | 
						|
                    application penetration testing techniques. </p>
 | 
						|
                <p>The WebGoat project is led
 | 
						|
                    by Bruce Mayhew. Please send all comments to Bruce at [TODO, session was blowing up here for some reason].</p>
 | 
						|
 | 
						|
                <div id="team">
 | 
						|
                    <table border="0" align="center" class="lessonText">
 | 
						|
                        <tr>
 | 
						|
                            <td width="50%">
 | 
						|
                                <div align="center"><a href="http://www.owasp.org"><img
 | 
						|
                                            border="0" src="images/logos/owasp.jpg" alt="OWASP Foundation"
 | 
						|
                                            longdesc="http://www.owasp.org" /></a></div>
 | 
						|
                            </td>
 | 
						|
                            <td width="50%">
 | 
						|
                                <div align="center"><a href="http://www.aspectsecurity.com"><img
 | 
						|
                                            border="0" src="images/logos/aspect.jpg" alt="Aspect Security"
 | 
						|
                                            longdesc="http://www.aspectsecurity.com" /></a></div>
 | 
						|
                            </td>
 | 
						|
                        </tr>
 | 
						|
                        <tr>
 | 
						|
                            <td colspan="2">
 | 
						|
                                <div align="center"><span class="style1">
 | 
						|
                                        WebGoat Authors </span></div>
 | 
						|
                            </td>
 | 
						|
                        </tr>
 | 
						|
                        <tr>
 | 
						|
                            <td colspan="2">
 | 
						|
                                <div align="center"><span class="style2">
 | 
						|
                                        Bruce Mayhew </span></div>
 | 
						|
                            </td>
 | 
						|
                        </tr>
 | 
						|
                        <tr>
 | 
						|
                            <td colspan="2">
 | 
						|
                                <div align="center"><span class="style2">
 | 
						|
                                        Jeff Williams </span></div>
 | 
						|
                            </td>
 | 
						|
                        </tr>
 | 
						|
                        <tr>
 | 
						|
                            <td width="50%">
 | 
						|
                                <div align="center"><span class="style1"><br />
 | 
						|
                                        WebGoat Design Team </span></div>
 | 
						|
                            </td>
 | 
						|
                            <td width="50%">
 | 
						|
                                <div align="center"><span class="style1"><br />
 | 
						|
                                        V5.4 Lesson Contributers </span></div>
 | 
						|
                            </td>
 | 
						|
                        </tr>
 | 
						|
                        <tr>
 | 
						|
                            <td valign="top">
 | 
						|
                                <div align="center" class="style2">David Anderson</div>
 | 
						|
                                <div align="center" class="style2">Laurence Casey (Graphics)</div>
 | 
						|
                                <div align="center" class="style2">Rogan Dawes</div>
 | 
						|
                                <div align="center" class="style2">Bruce Mayhew</div>
 | 
						|
                            </td>
 | 
						|
                            <td valign="top">
 | 
						|
                                <div align="center" class="style2">Sherif Koussa</div>
 | 
						|
                                <div align="center" class="style2">Yiannis Pavlosoglou</div>
 | 
						|
                                <div align="center" class="style2"></div>
 | 
						|
 | 
						|
                            </td>
 | 
						|
                        </tr>
 | 
						|
                        <tr>
 | 
						|
                            <td height="25" valign="bottom">
 | 
						|
                                <div align="center"><span class="style1">Special Thanks
 | 
						|
                                        for V5.4</span></div>
 | 
						|
                            </td>
 | 
						|
                            <td height="25" valign="bottom">
 | 
						|
                                <div align="center"><span class="style1">Documentation
 | 
						|
                                        Contributers</span></div>
 | 
						|
                            </td>
 | 
						|
                        </tr>
 | 
						|
                        <tr>
 | 
						|
                            <td>
 | 
						|
                                <div align="center" class="style2">Brian Ciomei (Multitude of bug fixes)</div>
 | 
						|
                                <div align="center" class="style2">To all who have sent comments</div>
 | 
						|
 | 
						|
                            </td>
 | 
						|
                            <td>
 | 
						|
                                <div align="center" class="style2">
 | 
						|
                                    <a href="http://www.zionsecurity.com/" target="_blank">Erwin Geirnaert</a></div>
 | 
						|
                                <div align="center" class="style2">
 | 
						|
                                    <a href="http://yehg.org/" target="_blank">Aung Khant</a></div>
 | 
						|
                                <div align="center" class="style2">
 | 
						|
                                    <a href="http://www.softwaresecured.com" target="blank">Sherif Koussa</a>
 | 
						|
                                </div>
 | 
						|
                            </td>
 | 
						|
                        </tr>
 | 
						|
                        <tr>
 | 
						|
                            <td colspan="2">
 | 
						|
                                <div align="center" class="style2">
 | 
						|
                                    <form id="form" name="form" method="post" action="attack"><input
 | 
						|
                                            type="submit" name="start" value="Start WebGoat" /></form>
 | 
						|
                                </div>
 | 
						|
                            </td>
 | 
						|
                        </tr>
 | 
						|
                        <tr>
 | 
						|
                            <td>
 | 
						|
                                <div align="center" class="style2"> </div>
 | 
						|
                            </td>
 | 
						|
                        </tr>
 | 
						|
                    </table>
 | 
						|
                </div>
 | 
						|
            </div>
 | 
						|
            <div align="center" class="style2"> </div>
 | 
						|
            <div align="center" class="style2"> </div>
 | 
						|
            <div align="center" class="style2"> </div>
 | 
						|
            <div id="warning">WARNING<br />
 | 
						|
                While running this program, your machine is extremely vulnerable to
 | 
						|
                attack if you are not running on localhost. If you are NOT running on localhost (default configuration), You should disconnect from the network while using this program.
 | 
						|
                <br />
 | 
						|
                <br />
 | 
						|
                This program is for educational purposes only. Use of these techniques
 | 
						|
                without permission could lead to job termination, financial liability,
 | 
						|
                and/or criminal penalties.</div>
 | 
						|
        </div>
 | 
						|
    </body>
 | 
						|
</html>
 |