René Zubcevic 9dea696c4c

added int test for IDOR and fixed green button issue (#801)

2020-04-29 12:12:11 +02:00

..

auth-bypass

Add path traversal lesson

2020-03-10 08:03:48 +01:00

bypass-restrictions

Add path traversal lesson

2020-03-10 08:03:48 +01:00

challenge

Add dummy extra method with return type AttackResult because every assignment needs at least one such mapping (in the challenges case this is optional but since the challenges are an extra thing and this is the only assignment which has no such method adding a dummy method makes sense)

2020-04-19 15:42:50 +02:00

chrome-dev-tools

Add path traversal lesson

2020-03-10 08:03:48 +01:00

cia

Add path traversal lesson

2020-03-10 08:03:48 +01:00

client-side-filtering

Fix reading file, added try/catch and added tests

2020-04-28 09:25:39 +02:00

command-injection

Add path traversal lesson

2020-03-10 08:03:48 +01:00

cross-site-scripting

fix 404 links

2020-04-27 10:44:39 +02:00

crypto

corrected hints and improved error handling base64 (#781)

2020-04-14 16:13:25 +02:00

csrf

fix 404 links

2020-04-27 10:44:39 +02:00

html-tampering

fix 404 links

2020-04-27 10:44:39 +02:00

http-basics

Remove unused imports and parameters

2020-04-19 15:42:50 +02:00

http-proxies

Changed the order of explanation of setting up ZAP/Burp a bit (feedback from workshop). This makes the necessary steps more explicit by moving all extra configuration for https etc to the back. So when you follow the lesson you will only setup the minimal and not get confused about things which are only necessary in certain cases

2020-04-19 15:42:50 +02:00

idor

added int test for IDOR and fixed green button issue (#801)

2020-04-29 12:12:11 +02:00

insecure-deserialization

Add path traversal lesson

2020-03-10 08:03:48 +01:00

insecure-login

fix green buttons

2020-04-22 16:37:00 +02:00

jwt

Fix Java 11 issue where the order of methods returned in AssignmentEndpoint subclasses returned wrong method for determining the mapping of an assignment. Now we walk over all methods until we find one which has for example a @GetMapping with AttackResult or ResponseEntity<AttackResult as return type. If no such method is found an exception is thrown

2020-04-19 15:42:50 +02:00

missing-function-ac

suppressing some useless log messages and banners in unit tests (#752)

2020-01-25 12:11:45 +01:00

password-reset

fix 404 links

2020-04-27 10:44:39 +02:00

path-traversal

Fix copying of pictures to WebGoat home directory

2020-04-27 13:07:23 +02:00

secure-passwords

Add path traversal lesson

2020-03-10 08:03:48 +01:00

sql-injection

Fix the syntax differences between HSQL and Postgres

2020-04-27 11:45:41 +02:00

ssrf

Add path traversal lesson

2020-03-10 08:03:48 +01:00

vulnerable-components

clean up and update js

2020-04-08 12:05:01 +02:00

webgoat-introduction

lessonplan character updates so it also works on Windows Cp125

2020-04-20 12:54:18 +02:00

webgoat-lesson-template

fix number of steps

2020-04-27 10:44:39 +02:00

webwolf-introduction

added ace js for java

2020-04-28 09:33:54 +02:00

xxe

suppressing some useless log messages and banners in unit tests (#752)

2020-01-25 12:11:45 +01:00

pom.xml

Add path traversal lesson

2020-03-10 08:03:48 +01:00

sol.MD

Add JavaScript to assignment otherwise you will not be able to see the flow of the endpoint

2019-11-12 09:12:37 +01:00

sol.txt

Update and rename sol.txt to sol.MD

2017-11-02 13:09:49 +01:00