OWASP/Training/OWASP WebGoat Project - Revision history

Sandra Paiva at 17:22, 23 November 2010

2010-11-23T17:22:12Z

Nishi at 13:28, 16 April 2010

2010-04-16T13:28:09Z

Nishi at 14:59, 14 April 2010

2010-04-14T14:59:35Z

Nishi at 14:54, 14 April 2010

2010-04-14T14:54:13Z

Nishi at 12:54, 14 April 2010

2010-04-14T12:54:34Z

Nishi at 12:52, 14 April 2010

2010-04-14T12:52:25Z

Nishi at 12:43, 14 April 2010

2010-04-14T12:43:10Z

Paulo Coimbra at 17:05, 12 April 2010

2010-04-12T17:05:29Z

Paulo Coimbra at 19:24, 15 March 2010

2010-03-15T19:24:41Z

Paulo Coimbra: Created page with '{{Template:{{{1}}}OWASP Training Modules | Module_designation = [[:Category:OWASP_WebGoat_Project|OWASP Enterprise Security API]…'

2010-03-15T19:23:59Z

Created page with '{{Template:<includeonly>{{{1}}}</includeonly><noinclude>OWASP Training Modules</noinclude> | Module_designation = [[:Category:OWASP_WebGoat_Project|OWASP Enterprise Security API]…'

New page

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>OWASP Training Modules</noinclude>
| Module_designation = [[:Category:OWASP_WebGoat_Project|OWASP Enterprise Security API]]
| Module_Overview_Goal =
| Content =
* Content_X<br>
* Content_Y<br>
* Content_Z<br>
| Material = [http:// TBD]
}}

← Older revision		Revision as of 17:22, 23 November 2010
Line 25:		Line 25:
	\| Material = [http://www.owasp.org/images/5/55/OWASP_WebGoat.ppt Web Goat Presentation]		\| Material = [http://www.owasp.org/images/5/55/OWASP_WebGoat.ppt Web Goat Presentation]
	}}		}}
		+
		+
		+
		+	[[Category:OWASP_Training\|Training]]

@@ Line 23: / Line 23: @@
 &nbsp;
-| Material = [http://www.owasp.org/index.php/File:OWASPAppSec2007Milan_WebGoatv5.ppt Web Goat Presentation]
+| Material = [http://www.owasp.org/images/5/55/OWASP_WebGoat.ppt Web Goat Presentation]
 }}

@@ Line 10: / Line 10: @@
 * [[Cross-site Scripting (XSS)]]
 * Access Control
-* [[Race conditions|Thread Safety]]
+* Thread Safety
 * [[Unvalidated_Input|Hidden Form Field Manipulation]]
 * Parameter Manipulation

@@ Line 2: / Line 2: @@
 | Module_designation = [[:Category:OWASP_WebGoat_Project|OWASP WebGoat Project]]
 | Module_Overview_Goal =
 | Content =
-Web Goat is a deliberately insecure J2EE web application to teach web application security lessons. In each lesson, users must demonstrate their understanding of a security issue by exploiting a real vulnerability in the WebGoat application. The application is a realistic teaching environment, providing users with hints and code to further explain the lesson. The primary goal of the WebGoat project is simple: create a de-facto interactive teaching environment for web application security.
+WebGoat is written in Java and therefore installs on any platform with a Java virtual machine. Once deployed, the user can go through the lessons and track their progress with the scorecard. There are currently over 30 lessons, including those dealing with the following issues:
 &nbsp;
 | Material = [http://www.owasp.org/index.php/File:OWASPAppSec2007Milan_WebGoatv5.ppt Web Goat Presentation]
 }}

@@ Line 4: / Line 4: @@
 | Content =
 Web Goat is a deliberately insecure J2EE web application to teach web application security lessons. In each lesson, users must demonstrate their understanding of a security issue by exploiting a real vulnerability in the WebGoat application. The application is a realistic teaching environment, providing users with hints and code to further explain the lesson. The primary goal of the WebGoat project is simple: create a de-facto interactive teaching environment for web application security.
-&nbsp;
 &nbsp;
 | Material = [http://www.owasp.org/index.php/File:OWASPAppSec2007Milan_WebGoatv5.ppt Web Goat Presentation]
 }}

@@ Line 8: / Line 8: @@
 * Content_Z<br>
 &nbsp;
-| Material = [http:// TBD]
+| Material = [http://www.owasp.org/index.php/File:OWASPAppSec2007Milan_WebGoatv5.ppt Web Goat Presentation]
 }}