WebGoat User Guide Introduction - Revision history

John Munsey: /* Overview */

2009-11-30T17:20:19Z

‎Overview

Bmayhew at 23:03, 4 June 2009

2009-06-04T23:03:43Z

MediaWiki spam cleanup: Reverting to last version not containing links to www.textgetelcaolo.com

2009-05-27T18:29:00Z

Reverting to last version not containing links to www.textgetelcaolo.com

Deleted user at 15:48, 22 May 2009

2009-05-22T15:48:07Z

Rknell: Linked keyword: HTTPOnly

2007-07-27T17:36:03Z

Linked keyword: HTTPOnly

Mmeucci at 12:47, 6 March 2007

2007-03-06T12:47:24Z

Koussa at 14:48, 28 December 2006

2006-12-28T14:48:55Z

Koussa at 14:37, 28 December 2006

2006-12-28T14:37:16Z

Koussa at 14:36, 28 December 2006

2006-12-28T14:36:35Z

Koussa at 02:14, 24 December 2006

2006-12-24T02:14:38Z

@@ Line 4: / Line 4: @@
 The WebGoatV5 application is designed to illustrate typical security flaws within web-applications. It is intended to teach a structured approach to testing for, and exploiting such vulnerabilities within the context of an Application Security Assessment.
-A full Application Security Assessment testing methodology is being documented by <u>http://www.owasp.org/index.php/OWASP_Testing_Project</u> and this will provide a superset of the issues demonstrated within the WebGoat. If may include a formal design and code review, for example. The WebGoat lessons aim to give practical training and examples relating to the ''Implementation'' ''Review'' phase of the OWASP Web Application Security Testing Methodology.
+A full Application Security Assessment testing methodology is being documented by <u>http://www.owasp.org/index.php/OWASP_Testing_Project</u> and this will provide a superset of the issues demonstrated within the WebGoat. It may include a formal design and code review, for example. The WebGoat lessons aim to give practical training and examples relating to the ''Implementation'' ''Review'' phase of the OWASP Web Application Security Testing Methodology.
 The WebGoatv5 Application provides a testing platform for a typical application security assessment. The assessor is given the same information and rights as a typical customer or client of an on-line application.

@@ Line 2: / Line 2: @@
 ==Overview ==
-The WebGoatv5 application is designed to illustrate typical security flaws within web-applications. It is intended to teach a structured approach to testing for, and exploiting such vulnerabilities within the context of an Application Security Assessment.
+The WebGoatV5 application is designed to illustrate typical security flaws within web-applications. It is intended to teach a structured approach to testing for, and exploiting such vulnerabilities within the context of an Application Security Assessment.
 A full Application Security Assessment testing methodology is being documented by <u>http://www.owasp.org/index.php/OWASP_Testing_Project</u> and this will provide a superset of the issues demonstrated within the WebGoat. If may include a formal design and code review, for example. The WebGoat lessons aim to give practical training and examples relating to the ''Implementation'' ''Review'' phase of the OWASP Web Application Security Testing Methodology.

← Older revision		Revision as of 18:29, 27 May 2009
Line 1:		Line 1:
−	~~http://www.textgetelcaolo.com~~
	[[WebGoat User and Install Guide Table of Contents]]		[[WebGoat User and Install Guide Table of Contents]]

← Older revision		Revision as of 15:48, 22 May 2009
Line 1:		Line 1:
		+	http://www.textgetelcaolo.com
	[[WebGoat User and Install Guide Table of Contents]]		[[WebGoat User and Install Guide Table of Contents]]

@@ Line 62: / Line 62: @@
   || Buffer Overflow (TBD)
 |-
-  || HttpOnly Test
+  || [[HTTPOnly]] Test
 |-
   || How to Perform Command Injection

@@ Line 97: / Line 97: @@
 |-
   || How to Perform XML Injection Attacks
 |-
   || How to Add a New Lesson

@@ Line 20: / Line 20: @@
 {| border=1
-  || Http Basics
+  || HTTP Basics
 |-
   || HTTP Splitting and Cache Poisining

@@ Line 2: / Line 2: @@
 ==Overview ==
-The WebGoatv4 application is designed to illustrate typical security flaws within web-applications. It is intended to teach a structured approach to testing for, and exploiting such vulnerabilities within the context of an Application Security Assessment.
+The WebGoatv5 application is designed to illustrate typical security flaws within web-applications. It is intended to teach a structured approach to testing for, and exploiting such vulnerabilities within the context of an Application Security Assessment.
 A full Application Security Assessment testing methodology is being documented by <u>http://www.owasp.org/testing/</u> and this will provide a superset of the issues demonstrated within the WebGoat. If may include a formal design and code review, for example. The WebGoat lessons aim to give practical training and examples relating to the ''Implementation'' ''Review'' phase of the OWASP Web Application Security Testing Methodology.
-The WebGoatv4 Application provides a testing platform for a typical application security assessment. The assessor is given the same information and rights as a typical customer or client of an on-line application.
+The WebGoatv5 Application provides a testing platform for a typical application security assessment. The assessor is given the same information and rights as a typical customer or client of an on-line application.
 * The application is web based
 * The attack simulations are remote
@@ Line 17: / Line 17: @@
-The current lesson plans provided in WebGoatv4 include:
+The current lesson plans provided in WebGoatv5 include:
 {| border=1