From a877e93780c4bb283078efaadfce61ce587c933f Mon Sep 17 00:00:00 2001 From: Ken Johnson Date: Wed, 22 May 2013 13:26:00 -0400 Subject: [PATCH] abstracted out tutorial as I start writing these up, otherwise the html is going to get incredibly cluttered --- .../broken_auth_sess/_user_pass_enum.html.erb | 69 ++++++++++++++++++ app/views/tutorials/broken_auth.html.erb | 72 +------------------ 2 files changed, 71 insertions(+), 70 deletions(-) create mode 100644 app/views/layouts/tutorial/broken_auth_sess/_user_pass_enum.html.erb diff --git a/app/views/layouts/tutorial/broken_auth_sess/_user_pass_enum.html.erb b/app/views/layouts/tutorial/broken_auth_sess/_user_pass_enum.html.erb new file mode 100644 index 0000000..f307ef6 --- /dev/null +++ b/app/views/layouts/tutorial/broken_auth_sess/_user_pass_enum.html.erb @@ -0,0 +1,69 @@ +
+
+
+ A3 - Broken Authentication and Session Management (Instance #1) +
+
+
+
+
+
+ + + + Description + +
+
+
+

+Application functions related to authentication and session management are often not implemented correctly, allowing attackers to compromise passwords, keys, session tokens, or exploit other implementation flaws to assume other users’ identities. +

+
+
+
+
+
+ + + + Bug + +
+
+
+

Broken Authentication and Session Management

+
+
+
+
+
+ + + + Solution + +
+
+
+ Anim pariatur cliche reprehenderit, enim eiusmod high life accusamus terry richardson ad squid. 3 wolf moon officia aute, non cupidatat skateboard dolor brunch. Food truck quinoa nesciunt laborum eiusmod. Brunch 3 wolf moon tempor +
+
+
+
+
+ + + + Hint + +
+
+
+ Anim pariatur cliche reprehenderit, enim eiusmod high life accusamus terry richardson ad squid. 3 wolf moon officia aute, non cupidatat skateboard dolor brunch. Food truck quinoa nesciunt laborum eiusmod. Brunch 3 wolf moon tempor +
+
+
+
+
+
\ No newline at end of file diff --git a/app/views/tutorials/broken_auth.html.erb b/app/views/tutorials/broken_auth.html.erb index 837acc9..52ee205 100644 --- a/app/views/tutorials/broken_auth.html.erb +++ b/app/views/tutorials/broken_auth.html.erb @@ -2,76 +2,8 @@
-
-
-
- A3 - Broken Authentication and Session Management -
-
-
-
-
-
- - - - Description - -
-
-
-

- Application functions related to authentication and session management are often not implemented correctly, allowing attackers to compromise passwords, keys, session tokens, or exploit other implementation flaws to assume other users’ identities. -

-
-
-
-
-
- - - - Bug - -
-
-
- Anim pariatur cliche reprehenderit, enim eiusmod high life accusamus terry richardson ad squid. 3 wolf moon officia aute, non cupidatat skateboard dolor brunch. Food truck quinoa nesciunt laborum eiusmod. Brunch 3 wolf moon tempor -
-
-
-
-
- - - - Solution - -
-
-
- Anim pariatur cliche reprehenderit, enim eiusmod high life accusamus terry richardson ad squid. 3 wolf moon officia aute, non cupidatat skateboard dolor brunch. Food truck quinoa nesciunt laborum eiusmod. Brunch 3 wolf moon tempor -
-
-
-
-
- - - - Hint - -
-
-
- Anim pariatur cliche reprehenderit, enim eiusmod high life accusamus terry richardson ad squid. 3 wolf moon officia aute, non cupidatat skateboard dolor brunch. Food truck quinoa nesciunt laborum eiusmod. Brunch 3 wolf moon tempor -
-
-
-
-
-
-
+ <%= render :partial => ("layouts/tutorial/broken_auth_sess/user_pass_enum")%> +