SecureArmors

WebGoat v7.1 Web Hacking Simulation WalkThrough Series Part:3

OWASP WebGoat v7.1 Web Hacking Simulation WalkThrough Series Part 3:

1.Cross-Site Scripting.

Description: It includes

• Phishing with XSS – 0.25 min
• LAB: Cross Site Scripting – 3.17 min
• Stage 1: Stored XSS  – 3.17 min
• Stage 3: Stored XSS Revisited  -7.24 min
• Stage 5: Reflected XSS  – 10.15 Min
• Stored XSS Attacks – 11.26 Min
• Reflected XSS Attacks  – 14.21 Min
• Cross Site Request Forgery (CSRF) : 16.09 min
• CSRF Prompt By-Pass : 18.18 min
• CSRF Token By-Pass  21.24 min
• HTTPOnly Test : 24.26 min

2.Improper Error Handling.

• Fail Open Authentication Scheme -28.17 min

3.Injection Flaws   Description: It includes the following:

• Command Injection  :31.56 min
• Numeric SQL Injection  : 34.24 min
• Log Spoofing  : 36.30 min
• XPATH Injection : 38.24 min
• LAB: SQL Injection : 39.56 min
• Stage 1: String SQL Injection : 41:21 min
• Stage 3: Numeric SQL Injection  : 42.18 min
• Database Backdoors : 43.55 min
• Blind String SQL Injection : 46.13 min
• Blind Numeric SQL Injection: 55.06 min