d1e44bbc98
* better check on host and port for password reset and make context roots more flexible * spotless applied * removed hardcoded /WebGoat from js * removed hardcoded /WebGoat from js * fix spotless * fix scoreboard * upgrade WebWolf bootstrap version and icons and templates - part 1 * fixed more bootstrap 5 style issues and context path issues * organized WebSecurityConfig based on latest conventions and added basic support for oauth (more work needed) * spotless applied * added mock bean * requires updates to properties - commented for now * requires updates to properties - commented for now * oauth secrets through env values * user creation after oauth login * integration test against non default context paths * adjusted StartupMessage * add global model element username * conditionally show login oauth links * fixed WebWolf login --------- Co-authored-by: René Zubcevic <rene@Mac-mini-van-Rene.local>
40 lines
1.7 KiB
HTML
Executable File
40 lines
1.7 KiB
HTML
Executable File
<!DOCTYPE html>
|
|
|
|
<html xmlns:th="http://www.thymeleaf.org">
|
|
|
|
<div class="lesson-page-wrapper">
|
|
<!-- reuse this lesson-page-wrapper block for each 'page' of content in your lesson -->
|
|
<!-- include content here. Content will be presented via asciidocs files,
|
|
which you put in src/main/resources/plugin/lessonplans/{lang}/{fileName}.adoc -->
|
|
<div class="adoc-content" th:replace="~{doc:lessons/insecurelogin/documentation/InsecureLogin_Intro.adoc}"></div>
|
|
</div>
|
|
|
|
<div class="lesson-page-wrapper">
|
|
<!-- stripped down without extra comments -->
|
|
<div class="adoc-content" th:replace="~{doc:lessons/insecurelogin/documentation/InsecureLogin_Task.adoc}"></div>
|
|
<div class="attack-container">
|
|
<div class="assignment-success"><i class="fa fa-2 fa-check hidden" aria-hidden="true"></i></div>
|
|
<script th:src="@{/lesson_js/credentials.js}"></script>
|
|
<form class="attack-form" accept-charset="UNKNOWN" name="task"
|
|
method="POST"
|
|
action="InsecureLogin/task">
|
|
|
|
<button onclick="javascript:submit_secret_credentials();return false;">Log in</button>
|
|
|
|
</form>
|
|
<br></br>
|
|
<form class="attack-form" accept-charset="UNKNOWN" name="task"
|
|
method="POST"
|
|
action="InsecureLogin/task">
|
|
|
|
<input type="text" value="" name="username" placeholder="username"/>
|
|
<input type="password" value="" name="password" placeholder="password" />
|
|
<input type="submit" value="Submit" />
|
|
|
|
</form>
|
|
<div class="attack-feedback"></div>
|
|
<div class="attack-output"></div>
|
|
</div>
|
|
</div>
|
|
</html>
|