OWASP WebGoat v7.1 Web Hacking Simulation WalkThrough Series Part 3:

Описание

OWASP WebGoat v7.1 Web Hacking Simulation WalkThrough Series Part 3:
1.Cross-Site Scripting.
Description: It includes
• Phishing with XSS - 0.25 min
• LAB: Cross Site Scripting - 3.17 min
• Stage 1: Stored XSS  - 3.17 min
• Stage 3: Stored XSS Revisited  -7.24 min
• Stage 5: Reflected XSS  - 10.15 Min
• Stored XSS Attacks - 11.26 Min
• Reflected XSS Attacks  - 14.21 Min
• Cross Site Request Forgery (CSRF) : 16.09 min  
• CSRF Prompt By-Pass : 18.18 min
• CSRF Token By-Pass  21.24 min
• HTTPOnly Test : 24.26 min

2.Improper Error Handling.
• Fail Open Authentication Scheme -28.17 min

3.Injection Flaws  
Description: It includes the following:
• Command Injection  :31.56 min
• Numeric SQL Injection  : 34.24 min
• Log Spoofing  : 36.30 min
• XPATH Injection : 38.24 min 
• LAB: SQL Injection : 39.56 min
• Stage 1: String SQL Injection : 41:21 min  
• Stage 3: Numeric SQL Injection  : 42.18 min
• Database Backdoors : 43.55 min 
• Blind String SQL Injection : 46.13 min
• Blind Numeric SQL Injection: 55.06 min