This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Lesson Plans
From OWASP
Revision as of 19:25, 5 June 2006 by Weilin Zhong (talk | contribs)
WebGoat User Guide Table of Contents
The current lesson plans included in this release of WebGoatv4 include:
| Http Basics |
| How to Exploit Thread Safety Problems |
| How to Discover Clues in the HTML |
| How to Exploit Hidden Fields |
| How to Exploit Unchecked Email |
| How to Bypass Client Side JavaScript Validation |
| How to Bypass a Role Based Access Control Scheme |
| How to Bypass a Path Based Access Control Scheme |
| How to Spoof an Authentication Cookie |
| Basic Authentication |
| How to Perform Cross Site Trace Attacks |
| How to Perform Command Injection |
| How to Perform Blind SQL Injection |
| How to Bypass a Fail Open Authentication Scheme |
| Web Service SQL Injection |
| The Challenge |
For each lesson within WebGoat, an overview and objectives are provided. These are accessed through the Show Lesson Plan button.
These lesson plans describe the operation of each aspect of the target application, the areas of interest relating to the security assessment and the type of attack that should be attempted.
