From fda47b3643d0b822153a2a91f7e71f3d6b06305d Mon Sep 17 00:00:00 2001 From: Ken Johnson Date: Thu, 25 Apr 2013 01:54:10 -0400 Subject: [PATCH] changed a bunch of stuff --- app/controllers/tutorials_controller.rb | 2 +- app/views/layouts/tutorial/_sidebar.html.erb | 6 +- app/views/tutorials/broken_auth.html.erb | 62 ++++++++++++++++++ app/views/tutorials/crypto.html.erb | 62 ++++++++++++++++++ app/views/tutorials/csrf.html.erb | 62 ++++++++++++++++++ app/views/tutorials/injection.html.erb | 62 ++++++++++++++++++ app/views/tutorials/insecure_doa.html.erb | 7 -- app/views/tutorials/insecure_dor.html.erb | 69 ++++++++++++++++++++ app/views/tutorials/misconfig.html.erb | 62 ++++++++++++++++++ app/views/tutorials/xss.html.erb | 62 ++++++++++++++++++ config/routes.rb | 2 +- 11 files changed, 446 insertions(+), 12 deletions(-) delete mode 100644 app/views/tutorials/insecure_doa.html.erb create mode 100644 app/views/tutorials/insecure_dor.html.erb diff --git a/app/controllers/tutorials_controller.rb b/app/controllers/tutorials_controller.rb index 10e5583..1e77beb 100755 --- a/app/controllers/tutorials_controller.rb +++ b/app/controllers/tutorials_controller.rb @@ -11,7 +11,7 @@ class TutorialsController < ApplicationController def broken_auth end - def insecure_doa + def insecure_dor end def csrf diff --git a/app/views/layouts/tutorial/_sidebar.html.erb b/app/views/layouts/tutorial/_sidebar.html.erb index 586862c..ac7d09f 100755 --- a/app/views/layouts/tutorial/_sidebar.html.erb +++ b/app/views/layouts/tutorial/_sidebar.html.erb @@ -24,12 +24,12 @@ A3 Broken Auth <% end %> -
  • - <%= link_to insecure_doa_tutorials_path do %> +
  • + <%= link_to insecure_dor_tutorials_path do %>
    - A4 Insecure DOA + A4 Insecure DOR <% end %>
  • diff --git a/app/views/tutorials/broken_auth.html.erb b/app/views/tutorials/broken_auth.html.erb index 51f6acd..d6ebf23 100644 --- a/app/views/tutorials/broken_auth.html.erb +++ b/app/views/tutorials/broken_auth.html.erb @@ -1,3 +1,65 @@ +
    +
    +
    +
    +
    +
    +
    + A3 - Broken Authentication and Session Management +
    +
    +
    +
    +
    +
    + + + + Description + +
    +
    +
    + Anim pariatur cliche reprehenderit, enim eiusmod high life accusamus terry richardson ad squid. 3 wolf moon officia aute, non cupidatat skateboard dolor brunch. Food truck quinoa nesciunt laborum eiusmod. Brunch 3 wolf moon tempor +
    +
    +
    +
    +
    + + + + Bug + +
    +
    +
    + Anim pariatur cliche reprehenderit, enim eiusmod high life accusamus terry richardson ad squid. 3 wolf moon officia aute, non cupidatat skateboard dolor brunch. Food truck quinoa nesciunt laborum eiusmod. Brunch 3 wolf moon tempor +
    +
    +
    +
    +
    + + + + Solution + +
    +
    +
    + Anim pariatur cliche reprehenderit, enim eiusmod high life accusamus terry richardson ad squid. 3 wolf moon officia aute, non cupidatat skateboard dolor brunch. Food truck quinoa nesciunt laborum eiusmod. Brunch 3 wolf moon tempor +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    + \ No newline at end of file diff --git a/app/views/tutorials/insecure_dor.html.erb b/app/views/tutorials/insecure_dor.html.erb new file mode 100644 index 0000000..73c3ed7 --- /dev/null +++ b/app/views/tutorials/insecure_dor.html.erb @@ -0,0 +1,69 @@ +
    +
    +
    +
    +
    +
    +
    + A4 - Insecure Direct Object References +
    +
    +
    +
    +
    +
    + + + + Description + +
    +
    +
    + Anim pariatur cliche reprehenderit, enim eiusmod high life accusamus terry richardson ad squid. 3 wolf moon officia aute, non cupidatat skateboard dolor brunch. Food truck quinoa nesciunt laborum eiusmod. Brunch 3 wolf moon tempor +
    +
    +
    +
    +
    + + + + Bug + +
    +
    +
    + Anim pariatur cliche reprehenderit, enim eiusmod high life accusamus terry richardson ad squid. 3 wolf moon officia aute, non cupidatat skateboard dolor brunch. Food truck quinoa nesciunt laborum eiusmod. Brunch 3 wolf moon tempor +
    +
    +
    +
    +
    + + + + Solution + +
    +
    +
    + Anim pariatur cliche reprehenderit, enim eiusmod high life accusamus terry richardson ad squid. 3 wolf moon officia aute, non cupidatat skateboard dolor brunch. Food truck quinoa nesciunt laborum eiusmod. Brunch 3 wolf moon tempor +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    + + \ No newline at end of file diff --git a/app/views/tutorials/misconfig.html.erb b/app/views/tutorials/misconfig.html.erb index 5506a60..d7f03c0 100644 --- a/app/views/tutorials/misconfig.html.erb +++ b/app/views/tutorials/misconfig.html.erb @@ -1,3 +1,65 @@ +
    +
    +
    +
    +
    +
    +
    + A6 - Security Misconfiguration +
    +
    +
    +
    +
    +
    + + + + Description + +
    +
    +
    + Anim pariatur cliche reprehenderit, enim eiusmod high life accusamus terry richardson ad squid. 3 wolf moon officia aute, non cupidatat skateboard dolor brunch. Food truck quinoa nesciunt laborum eiusmod. Brunch 3 wolf moon tempor +
    +
    +
    +
    +
    + + + + Bug + +
    +
    +
    + Anim pariatur cliche reprehenderit, enim eiusmod high life accusamus terry richardson ad squid. 3 wolf moon officia aute, non cupidatat skateboard dolor brunch. Food truck quinoa nesciunt laborum eiusmod. Brunch 3 wolf moon tempor +
    +
    +
    +
    +
    + + + + Solution + +
    +
    +
    + Anim pariatur cliche reprehenderit, enim eiusmod high life accusamus terry richardson ad squid. 3 wolf moon officia aute, non cupidatat skateboard dolor brunch. Food truck quinoa nesciunt laborum eiusmod. Brunch 3 wolf moon tempor +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +