WebGoat

admin

corrected spelling and some formatting

2008-08-11 14:39:09 +00:00

ClientSideFiltering

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

CrossSiteScripting

Minor syntax issue with the word prename in the instructions - reported by April King

2008-12-10 23:52:04 +00:00

DBCrossSiteScripting

some cleanup, and removing unneeded ClassNotFoundExceptions

2008-08-12 14:33:22 +00:00

DBSQLInjection

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

GoatHillsFinancial

some cleanup, and removing unneeded ClassNotFoundExceptions

2008-08-12 14:33:22 +00:00

instructor

corrected spelling and some formatting

2008-08-11 14:39:09 +00:00

RoleBasedAccessControl

Lots of wording changes and HTML fixes.

2009-01-06 21:06:42 +00:00

SQLInjection

some cleanup, and removing unneeded ClassNotFoundExceptions

2008-08-12 14:33:22 +00:00

AbstractLesson.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

AccessControlMatrix.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00

BackDoors.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

BasicAuthentication.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00

BlindNumericSqlInjection.java

Three new lessons and supporting files and changes to other files. Some changes to other files may not be quite the "right" way to accomplish my goal, so they may need to be updated. I deleted the old BlindSQLInjection lesson (which was by me) since it is replaced by the two new lessons for BlindNumericSqlInjection and BlindStringSqlInjection. Other new lesson is for MaliciousFileExecution, which requires the Apache Commons fileupload library (which in turn needs the commons io library).

2009-10-20 04:30:00 +00:00

BlindStringSqlInjection.java

Three new lessons and supporting files and changes to other files. Some changes to other files may not be quite the "right" way to accomplish my goal, so they may need to be updated. I deleted the old BlindSQLInjection lesson (which was by me) since it is replaced by the two new lessons for BlindNumericSqlInjection and BlindStringSqlInjection. Other new lesson is for MaliciousFileExecution, which requires the Apache Commons fileupload library (which in turn needs the commons io library).

2009-10-20 04:30:00 +00:00

BufferOverflow.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00

Category.java

Three new lessons and supporting files and changes to other files. Some changes to other files may not be quite the "right" way to accomplish my goal, so they may need to be updated. I deleted the old BlindSQLInjection lesson (which was by me) since it is replaced by the two new lessons for BlindNumericSqlInjection and BlindStringSqlInjection. Other new lesson is for MaliciousFileExecution, which requires the Apache Commons fileupload library (which in turn needs the commons io library).

2009-10-20 04:30:00 +00:00

Challenge2Screen.java

Changed the credit card user to be the user that was logged in as. Also base64 encoded the user cookie to make finding sql injection slightly harder.

2009-02-03 18:16:51 +00:00

ClientSideValidation.java

minor changes and improving display issues

2008-08-12 17:36:30 +00:00

CommandInjection.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00

ConcurrencyCart.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

CSRF.java

This change includes two additional CSRF lessons. One for

2009-10-23 21:23:17 +00:00

CsrfPromptByPass.java

Including one small documentation change: giving credit to Sherif Koussa's original CSRF lesson

2009-10-23 21:29:42 +00:00

CsrfTokenByPass.java

Including one small documentation change: giving credit to Sherif Koussa's original CSRF lesson

2009-10-23 21:29:42 +00:00

DangerousEval.java

corrected spelling and some formatting

2008-08-11 14:39:09 +00:00

DOMInjection.java

Changes by Chris Roe to fix lesson issues with FireFox.

2008-12-17 13:06:29 +00:00

DOMXSS.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

DOS_Login.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00

Encoding.java

minor changes and improving display issues

2008-08-12 17:36:30 +00:00

FailOpenAuthentication.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00

ForcedBrowsing.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00

ForgotPassword.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00

HiddenFieldTampering.java

minor changes and improving display issues

2008-08-12 17:36:30 +00:00

HowToWork.java

Minor 5.2 changes.

2008-05-13 03:44:40 +00:00

HtmlClues.java

* Hints added

2008-04-07 14:28:38 +00:00

HttpBasics.java

minor bug fixes and enhancements, including proper dollar value formatting

2008-08-14 14:31:17 +00:00

HttpOnly.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

HttpSplitting.java

fixed a typo

2008-12-11 21:15:20 +00:00

InsecureLogin.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

JavaScriptValidation.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

JSONInjection.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00

LessonAdapter.java

corrected spelling and some formatting

2008-08-11 14:39:09 +00:00

LogSpoofing.java

Separated DB usage for messages in CSRF and Stored XSS

2008-07-09 00:17:20 +00:00

MaliciousFileExecution.java

Three new lessons and supporting files and changes to other files. Some changes to other files may not be quite the "right" way to accomplish my goal, so they may need to be updated. I deleted the old BlindSQLInjection lesson (which was by me) since it is replaced by the two new lessons for BlindNumericSqlInjection and BlindStringSqlInjection. Other new lesson is for MaliciousFileExecution, which requires the Apache Commons fileupload library (which in turn needs the commons io library).

2009-10-20 04:30:00 +00:00

MultiLevelLogin1.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

MultiLevelLogin2.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

NewLesson.java

* Hints added

2008-04-07 14:28:38 +00:00

PasswordStrength.java

Minor fixes

2008-04-14 12:03:55 +00:00

PathBasedAccessControl.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00

Phishing.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

RandomLessonAdapter.java

minor bug fixes and enhancements, including proper dollar value formatting

2008-08-14 14:31:17 +00:00

ReflectedXSS.java

minor bug fixes and enhancements, including proper dollar value formatting

2008-08-14 14:31:17 +00:00

RemoteAdminFlaw.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

SameOriginPolicyProtection.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

SequentialLessonAdapter.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

SessionFixation.java

minor bug fixes and enhancements, including proper dollar value formatting

2008-08-14 14:31:17 +00:00

SilentTransactions.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00

SoapRequest.java

minor bug fixes and enhancements, including proper dollar value formatting

2008-08-14 14:31:17 +00:00

SqlNumericInjection.java

minor bug fixes and enhancements, including proper dollar value formatting

2008-08-14 14:31:17 +00:00

SqlStringInjection.java

corrected spelling and some formatting

2008-08-11 14:39:09 +00:00

StoredXss.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

ThreadSafetyProblem.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

TomcatSetup.java

SessionFixation and TomcatSetup edited

2008-04-14 07:50:12 +00:00

TraceXSS.java

corrected spelling and some formatting

2008-08-11 14:39:09 +00:00

UncheckedEmail.java

minor bug fixes and enhancements, including proper dollar value formatting

2008-08-14 14:31:17 +00:00

UsefulTools.java

* Hints added

2008-04-07 14:28:38 +00:00

WeakAuthenticationCookie.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00

WeakSessionID.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00

WelcomeScreen.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

WSDLScanning.java

Removed hardcoded webgoat path for URLs

2008-11-21 16:57:23 +00:00

WsSAXInjection.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

WsSqlInjection.java

Formatting according to OWASP WebGoat Java Style

2008-08-05 17:32:17 +00:00

XMLInjection.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00

XPATHInjection.java

Reformat of Java source. Added JavaStyle format definitions.

2008-02-27 00:29:19 +00:00