diff --git a/app/controllers/tutorials_controller.rb b/app/controllers/tutorials_controller.rb index 10e5583..1e77beb 100755 --- a/app/controllers/tutorials_controller.rb +++ b/app/controllers/tutorials_controller.rb @@ -11,7 +11,7 @@ class TutorialsController < ApplicationController def broken_auth end - def insecure_doa + def insecure_dor end def csrf diff --git a/app/views/layouts/tutorial/_sidebar.html.erb b/app/views/layouts/tutorial/_sidebar.html.erb index 586862c..ac7d09f 100755 --- a/app/views/layouts/tutorial/_sidebar.html.erb +++ b/app/views/layouts/tutorial/_sidebar.html.erb @@ -24,12 +24,12 @@ A3 Broken Auth <% end %> -
  • - <%= link_to insecure_doa_tutorials_path do %> +
  • + <%= link_to insecure_dor_tutorials_path do %>
    - A4 Insecure DOA + A4 Insecure DOR <% end %>
  • diff --git a/app/views/tutorials/broken_auth.html.erb b/app/views/tutorials/broken_auth.html.erb index 51f6acd..d6ebf23 100644 --- a/app/views/tutorials/broken_auth.html.erb +++ b/app/views/tutorials/broken_auth.html.erb @@ -1,3 +1,65 @@ +
    +
    +
    +
    +
    +
    +
    + A3 - Broken Authentication and Session Management +
    +
    +
    +
    +
    +
    + + + + Description + +
    +
    +
    + Anim pariatur cliche reprehenderit, enim eiusmod high life accusamus terry richardson ad squid. 3 wolf moon officia aute, non cupidatat skateboard dolor brunch. Food truck quinoa nesciunt laborum eiusmod. Brunch 3 wolf moon tempor +
    +
    +
    +
    +
    + + + + Bug + +
    +
    +
    + Anim pariatur cliche reprehenderit, enim eiusmod high life accusamus terry richardson ad squid. 3 wolf moon officia aute, non cupidatat skateboard dolor brunch. Food truck quinoa nesciunt laborum eiusmod. Brunch 3 wolf moon tempor +
    +
    +
    +
    +
    + + + + Solution + +
    +
    +
    + Anim pariatur cliche reprehenderit, enim eiusmod high life accusamus terry richardson ad squid. 3 wolf moon officia aute, non cupidatat skateboard dolor brunch. Food truck quinoa nesciunt laborum eiusmod. Brunch 3 wolf moon tempor +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    + \ No newline at end of file diff --git a/app/views/tutorials/insecure_dor.html.erb b/app/views/tutorials/insecure_dor.html.erb new file mode 100644 index 0000000..73c3ed7 --- /dev/null +++ b/app/views/tutorials/insecure_dor.html.erb @@ -0,0 +1,69 @@ +
    +
    +
    +
    +
    +
    +
    + A4 - Insecure Direct Object References +
    +
    +
    +
    +
    +
    + + + + Description + +
    +
    +
    + Anim pariatur cliche reprehenderit, enim eiusmod high life accusamus terry richardson ad squid. 3 wolf moon officia aute, non cupidatat skateboard dolor brunch. Food truck quinoa nesciunt laborum eiusmod. Brunch 3 wolf moon tempor +
    +
    +
    +
    +
    + + + + Bug + +
    +
    +
    + Anim pariatur cliche reprehenderit, enim eiusmod high life accusamus terry richardson ad squid. 3 wolf moon officia aute, non cupidatat skateboard dolor brunch. Food truck quinoa nesciunt laborum eiusmod. Brunch 3 wolf moon tempor +
    +
    +
    +
    +
    + + + + Solution + +
    +
    +
    + Anim pariatur cliche reprehenderit, enim eiusmod high life accusamus terry richardson ad squid. 3 wolf moon officia aute, non cupidatat skateboard dolor brunch. Food truck quinoa nesciunt laborum eiusmod. Brunch 3 wolf moon tempor +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    + + \ No newline at end of file diff --git a/app/views/tutorials/misconfig.html.erb b/app/views/tutorials/misconfig.html.erb index 5506a60..d7f03c0 100644 --- a/app/views/tutorials/misconfig.html.erb +++ b/app/views/tutorials/misconfig.html.erb @@ -1,3 +1,65 @@ +
    +
    +
    +
    +
    +
    +
    + A6 - Security Misconfiguration +
    +
    +
    +
    +
    +
    + + + + Description + +
    +
    +
    + Anim pariatur cliche reprehenderit, enim eiusmod high life accusamus terry richardson ad squid. 3 wolf moon officia aute, non cupidatat skateboard dolor brunch. Food truck quinoa nesciunt laborum eiusmod. Brunch 3 wolf moon tempor +
    +
    +
    +
    +
    + + + + Bug + +
    +
    +
    + Anim pariatur cliche reprehenderit, enim eiusmod high life accusamus terry richardson ad squid. 3 wolf moon officia aute, non cupidatat skateboard dolor brunch. Food truck quinoa nesciunt laborum eiusmod. Brunch 3 wolf moon tempor +
    +
    +
    +
    +
    + + + + Solution + +
    +
    +
    + Anim pariatur cliche reprehenderit, enim eiusmod high life accusamus terry richardson ad squid. 3 wolf moon officia aute, non cupidatat skateboard dolor brunch. Food truck quinoa nesciunt laborum eiusmod. Brunch 3 wolf moon tempor +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +