Hacme Bank - Revision history

Bill Sempf at 01:22, 22 July 2014

2014-07-22T01:22:24Z

Bill Sempf at 01:22, 22 July 2014

2014-07-22T01:22:00Z

Dinis.cruz: Redirected page to OWASP O2 Platform/WIKI/Using O2 on: HacmeBank

2009-12-07T23:16:25Z

Redirected page to OWASP O2 Platform/WIKI/Using O2 on: HacmeBank

Jdv at 17:39, 24 May 2009

2009-05-24T17:39:54Z

Medelibero at 02:43, 15 August 2006

2006-08-15T02:43:45Z

Dinis.cruz at 07:16, 29 June 2006

2006-06-29T07:16:19Z

New page

[Hacme Bank info will go here]

Since the Foundstone HacmeBank tool was released with an Open Source License, we can host a copy here and add more tests to it as soon as they are ready (i.e. we don't need to wait for Foundstone's release cycles)

== Notes: ==

'''Removing 'OnlyAllowLocalAccess' restriction'''

By default (to prevent accidental exploitation) non-local requests are not allowed (i.e. only http://127.0.0.1 will work).

To allow such accesses, edit the Hacme Bank's website web.config (in HacmeBank_v2_Website folder) and comment out the HttpModule_onlyAllowLocalAccess line in the <httpModules> section.

To also access (and 'unprotect') the Webservices, remove the same line from the web.config file that is in the HacmeBank_v2_WS folder

[[Category:OWASP .NET Project]]

← Older revision		Revision as of 01:22, 22 July 2014
Line 1:		Line 1:
	#Redirect [[:OWASP_O2_Platform/WIKI/Using_O2_on:_HacmeBank]]		#Redirect [[:OWASP_O2_Platform/WIKI/Using_O2_on:_HacmeBank]]
−
−	~~[[Category:OWASP .NET Project]]~~

← Older revision		Revision as of 01:22, 22 July 2014
Line 1:		Line 1:
−	#Redirect [[OWASP_O2_Platform/WIKI/Using_O2_on:_HacmeBank]]	+	#Redirect [[:OWASP_O2_Platform/WIKI/Using_O2_on:_HacmeBank]]

	[[Category:OWASP .NET Project]]		[[Category:OWASP .NET Project]]

← Older revision		Revision as of 23:16, 7 December 2009
Line 1:		Line 1:
−	[~~Hacme Bank info will go here]~~	+	#Redirect [[OWASP_O2_Platform/WIKI/Using_O2_on:_HacmeBank]]
−
−	Since the Foundstone HacmeBank tool was released with an Open Source License, we can host a copy here and add more tests to it as soon as they are ready (i.e. we don't need to wait for Foundstone's release cycles)
−
−
−
−	~~== Notes: ==~~
−
−	~~'''Removing 'OnlyAllowLocalAccess' restriction'''~~
−
−	~~By default (to prevent accidental exploitation) non-local requests are not allowed (i.e. only http:~~//~~127.0.0.1 will work).~~
−
−	~~To allow such accesses, edit the Hacme Bank's website web.config (in HacmeBank_v2_Website folder) and comment out the HttpModule_onlyAllowLocalAccess line in the <httpModules> section.~~
−
−	~~To also access (and 'unprotect') the Webservices, remove the same line from the web.config file that is in the HacmeBank_v2_WS folder~~
−
−	~~'''Installing on non-US English systems'''~~
−
−	~~The [http~~:~~//www.foundstone.com/us/resources/proddesc/hacmebank.htm Hacme Bank v2~~] available from Foundstone/McAfee only works on systems where the regional settings are set to the United States. Although, it at first appears to work, lots of the application interactions and database calls fail with ugly error messages. The easiest fix is to build a dedicated server using US English settings from the ground-up.
−
−	~~{{Template:Stub}}~~

	[[Category:OWASP .NET Project]]		[[Category:OWASP .NET Project]]

← Older revision		Revision as of 02:43, 15 August 2006
Line 14:		Line 14:

	To also access (and 'unprotect') the Webservices, remove the same line from the web.config file that is in the HacmeBank_v2_WS folder		To also access (and 'unprotect') the Webservices, remove the same line from the web.config file that is in the HacmeBank_v2_WS folder
		+
		+	{{Template:Stub}}

	[[Category:OWASP .NET Project]]		[[Category:OWASP .NET Project]]

@@ Line 14: / Line 14: @@
 To also access (and 'unprotect') the Webservices, remove the same line from the web.config file that is in the HacmeBank_v2_WS folder
 {{Template:Stub}}
 [[Category:OWASP .NET Project]]