 cktricky
|
979b6a229a
|
working on avoiding timing attacks piece
|
2013-08-17 21:27:33 -04:00 |
|
|
cktricky
|
d909f55ab9
|
initial write-up for gauntlt
|
2013-08-08 21:25:52 -04:00 |
|
|
cktricky
|
077e45c819
|
Merge branch 'master' of github.com:OWASP/railsgoat into top-10-2013
|
2013-08-08 16:59:14 -04:00 |
|
|
cktricky
|
65eb2caeaf
|
made a suggestion based on digininjas comment on Rails tutorials blog post. Better to change method name to hash_password than encrypt_password
|
2013-08-08 16:57:58 -04:00 |
|
|
cktricky
|
761e38905e
|
oops
|
2013-08-08 16:24:10 -04:00 |
|
|
cktricky
|
8d5df9dd9a
|
fixed this
|
2013-08-08 16:21:53 -04:00 |
|
|
cktricky
|
c024bd6591
|
changed something small
|
2013-08-08 16:21:04 -04:00 |
|
|
cktricky
|
9533f0d098
|
added a task for stopping and starting rails
|
2013-08-08 16:17:55 -04:00 |
|
|
cktricky
|
dafff5e60e
|
added ability to start and stop from rake tasks
|
2013-08-08 15:30:26 -04:00 |
|
|
cktricky
|
659ff82b77
|
Merge branch 'master' of github.com:OWASP/railsgoat into top-10-2013
|
2013-08-08 14:12:49 -04:00 |
|
|
cktricky
|
1b9e60b982
|
uncessary task
|
2013-08-08 14:11:49 -04:00 |
|
|
cktricky
|
2a4a7a5440
|
that was painful but managed to install gauntlt. Turns out you need to revert to minitest 4 (not 5, for the love of humantiy, not 5). Also, added rspec (not sure that did anything). Lastly, aruba and gauntlt. So, we now have a dir explicitly for attack files.
|
2013-08-08 14:04:52 -04:00 |
|
|
cktricky
|
8f4644c312
|
new note on top 10, 2013 progress
|
2013-07-28 20:13:16 -04:00 |
|
|
cktricky
|
66445167bd
|
shifting tutorials
|
2013-07-28 19:59:03 -04:00 |
|
|
cktricky
|
ef9570c4b2
|
Merge branch 'master' of github.com:OWASP/railsgoat
|
2013-07-28 19:45:00 -04:00 |
|
|
cktricky
|
f67bd0f5ed
|
correct naming within the command injection tutorial
|
2013-07-28 19:44:51 -04:00 |
|
|
Ken Johnson
|
0dd84a1724
|
Merge pull request #38 from cmlh/license
Add LICENSE.md file
|
2013-07-27 05:11:24 -07:00 |
|
|
Christian Heinrich
|
558b020411
|
Add LICENSE.md file
https://help.github.com/articles/open-source-licensing#how-can-i-go-back-through-my-public-repositories-and-give-them-licenses
|
2013-07-27 12:31:51 +10:00 |
|
|
Ken Johnson
|
14c1fb367d
|
added a tutorial for command injection
|
2013-07-10 20:42:04 -04:00 |
|
|
Ken Johnson
|
82b5809bee
|
almost finished with the write-up for the command injection vulnerability
|
2013-07-10 11:41:36 -04:00 |
|
|
Ken Johnson
|
ce6f32a1a2
|
working command injection in fileupload, closes issue #23
|
2013-07-09 16:36:03 -04:00 |
|
|
Ken Johnson
|
ea2014b637
|
I have exhausted all thoughts on how to actually get jquery file upload to work, so screw it, I am just going to make something homegrown for tomorrow
|
2013-07-09 13:53:00 -04:00 |
|
|
Ken Johnson
|
1a79471ef8
|
trying to fix a bug where you have to click twice on the tutorial credentials button
|
2013-06-20 11:28:29 -04:00 |
|
|
Ken Johnson
|
2e052828a6
|
taskbar / active enhancement
|
2013-06-16 00:49:28 -04:00 |
|
|
Ken Johnson
|
7b900bda2d
|
fixes issue #24
|
2013-06-10 16:25:14 -04:00 |
|
|
Ken Johnson
|
56381fe318
|
fixed issue #25
|
2013-06-10 15:27:21 -04:00 |
|
|
Ken Johnson
|
5ea8006fc1
|
closes issue #22
|
2013-06-07 09:05:11 -04:00 |
|
|
Ken Johnson
|
39d2e9d79f
|
finished CSRF/AJAX, closes issue #21
|
2013-06-06 22:40:52 -04:00 |
|
|
Ken Johnson
|
cc38bd3f2a
|
testing to see if I have commit access
|
2013-06-06 20:52:09 -04:00 |
|
|
Ken Johnson
|
db952a3dd9
|
Merge branch 'master' of github.com:cktricky/railsgoat
|
2013-06-06 16:44:07 -04:00 |
|
|
Ken Johnson
|
d445e59a98
|
this fixes issue #20, seriously, no clue how I missed the missing constantize code
|
2013-06-06 16:43:58 -04:00 |
|
|
Ken Johnson
|
f126ad49da
|
Merge pull request #19 from presidentbeef/remove_ds_store
Remove and ignore .DS_Store files
|
2013-06-04 13:05:13 -07:00 |
|
|
Ken Johnson
|
215bc8614c
|
removed orig
|
2013-06-04 16:04:58 -04:00 |
|
|
Ken Johnson
|
dc96bf524d
|
merged
|
2013-06-04 16:04:12 -04:00 |
|
|
Ken Johnson
|
9d42453b05
|
removed pesky files
|
2013-06-04 16:00:30 -04:00 |
|
|
Justin Collins
|
d9f4ac72d5
|
Remove and ignore .DS_Store files
|
2013-06-04 11:54:39 -07:00 |
|
|
Ken Johnson
|
bdf3f20955
|
added a license
|
2013-06-04 14:17:12 -04:00 |
|
|
Ken Johnson
|
b76283910c
|
holding off on the last issue until i confirm whether or not oreoshake can cover secure headers here
|
2013-06-04 14:06:10 -04:00 |
|
|
Ken Johnson
|
bb2985018d
|
closes issue #7
|
2013-06-04 13:59:41 -04:00 |
|
|
Ken Johnson
|
089e9540ac
|
finished admin filter and write-up for issue #6
|
2013-06-04 11:49:59 -04:00 |
|
|
Ken Johnson
|
b0ace5ebef
|
added write-up for issue #8
|
2013-06-04 11:24:39 -04:00 |
|
|
Ken Johnson
|
ef2b2e8e11
|
okay, finally got a working redirect vuln
|
2013-06-04 11:00:01 -04:00 |
|
|
Ken Johnson
|
e1dfb8309c
|
finished the write-up for crytpo vuln, close issue #5
|
2013-06-03 18:08:21 -04:00 |
|
|
Ken Johnson
|
0b09e0d4c1
|
added the primary insecure crypto storage vuln
|
2013-06-03 12:52:24 -04:00 |
|
|
Ken Johnson
|
6d5623a423
|
changed SQLi vuln location, did write-up, closes issue #1
|
2013-06-03 12:31:34 -04:00 |
|
|
Ken Johnson
|
6528b56de6
|
added a sql injection vulnerability
|
2013-06-03 02:19:36 -04:00 |
|
|
Ken Johnson
|
2ac771ca50
|
Issue #3 can be closed, write-up and vuln complete for A4
|
2013-06-03 01:54:07 -04:00 |
|
|
Ken Johnson
|
14251e6f39
|
added Insecure dor vuln
|
2013-06-03 01:29:16 -04:00 |
|
|
Ken Johnson
|
912c34a26e
|
finished the writeup for password complexity
|
2013-06-03 01:11:51 -04:00 |
|
|
Ken Johnson
|
88ea613da6
|
okay, write-up finished
|
2013-06-02 23:32:37 -04:00 |
|