WebGoat: password weakness issues, basic application hacking concerns

Home
Topics
Software Security Testing and Quality Assurance
Software Security Testing Tools
WebGoat: password weakness issues, basic application hacking concerns

WebGoat: password weakness issues, basic application hacking concerns

WebGoat: password weakness issues, basic application hacking concerns

Date: Oct 12, 2009

This is the second expert demo lesson using WebGoat, a free online tool that can teach testers the basics of securing online applications as well as some useful advanced tricks.

More on Software Security Testing Tools

Webgoat Tutorial
VIDEO - Expert Kevin Beaver demonstrates some of the power and versatility of free online testing tool Webgoat.
Securing rich internet and Web 2.0 applications
VIDEO - Security expert Kevin Beaver discusses securing rich internet and Web 2.0 applications, part of a multimedia security reference guide.
Security testing for unvalidated redirects and forwards
Tip - Security expert John Overbaugh gives security testers the information they need in order to ensure the Web application code that they’re responsible for is protected.
Social media in business: Security versus function
Answer - ALM expert Kevin Parker discusses the importance of security and offers some tips to business leaders in this response.
Save time and trouble: Conduct security testing before production
Answer - Expert John Overbaugh provides insights into why conducting security testing early in the lifecycle is important, and explains what to test for and when.
Security tools and application lifecycle management
Answer - Security and security tools have become more necessary to the application lifecycle, according to recent research. In this response, expert John Overbaugh discusses why security tools are essential to ALM and explains how he sees security activities expanding in the future.
Security tester roles in secure development lifecycle (SDL)
Answer - Some people may be surprised to learn that security testers are integral to nearly every phase of the secure development lifecycle.

Back to top

More from Related TechTarget Sites

SOA
Java
Windows Development
Oracle
Cloud computing
Business Analytics

SOA
- Old SOA versus new SOA? Open APIs change the game
  
  The ‘Goracle’ Android trial shows API evolution. It’s seen too in API management tools. Established SOA is meeting a new SOA of open APIs, some say.
- Service virtualization arises to meet services testing obstacles
  
  Service virtualization allows teams to simulate services before they are truly available. That’s a plus for Agile development and integration testing.
- App integration advisory: Use ESBs for message routing, translation
  
  Middleware experts advise that an ESB can help a SOA, but it can be harmful if used in the wrong cases.
Java
- FuseSource releases enterprise products at CamelOne 2012
  
  Here at CamelOne 2012, FuseSource is releasing two new products – Fuse ESB Enterprise 7.0 and Fuse MQ Enterprise 7.0.
- Open source integration framework keeps motorists safe in the UK
  
  Automotive rescue and recovery services in the UK gained significant messaging advantages over the past few years. The new Automotive Network Services (ANS) system, built and maintained by Apex Networks, connects automotive clubs and insurance agencies with the mechanics, riggers, and first responders that provide emergency services to accidents and disabled vehicles.
- Scaling up and scaling out to meet new business demands
  
  Scaling up and scaling out are two ways for growing businesses to increase productivity, but doing so blindly may be more costly than it's worth.
Windows Development
- Where can I find Visual Basic 6.0 DataEnvironment code samples?
  
  Get information on the best places to find Visual Basic DataEnvironment 6.0 code samples.
- Testing methods in Visual Studio 2010
  
  This is the second part in a two part series on unit testing in Visual Studio 2010.
- Unit testing in Visual Studio 2010
  
  Visual Studio 2010 contains a unit testing framework, and I’ll show you how to use it to automate your own unit tests.
Oracle
- Integrating non-Oracle applications into Oracle environments
  
  Oracle application integration becomes even more complicated when trying to integrate Oracle applications and databases with non-Oracle applications.
- Integrating Oracle applications brings complexity
  
  Oracle’s various investments and acquisitions over the past decade have some customers struggling to integrate it all, although Oracle’s own middleware might be able to help.
- Implementing a Hyperion system in 3 weeks -- it can be done
  
  An Oracle Hyperion system implementation in three weeks? Yes, it can be done. Communications firm Neustar implemented Hyperion in less than a month and gained efficiencies in the process.
Cloud computing
- Microsoft to battle Amazon with Azure improvements and services
  
  Microsoft will reintroduce Windows Azure next month with a new Web hosting framework and a detailed roadmap for its long-awaited IaaS, sources say.
- Citrix readies CloudPlatform on CloudStack in bid for enterprise cloud
  
  Compatibility with Amazon, a slew of cloud tools and its upcoming CloudPlatform could help virtualization titan Citrix become a serious cloud vendor.
- Alleviating BYOD security issues using private cloud
  
  Centralizing security management in a private cloud is an easy way to fend off malware attacks and adhere to BYOD security policies.
Business Analytics
- IT bottlenecks drive data visualization tool purchases
  
  Allstate, Autodesk, MGM Resorts and Great Western Bank share the secrets to data visualization tools’ success.
- 'Big data' analytics, mobile BI apps help U.S. Xpress truck more data
  
  In a video Q&A, Timothy Leonard of U.S. Xpress explains how the trucking company uses big data analytics, real-time BI software and mobile BI apps in unison to make important business decisions.
- Eckerson: 'Big data' analytics weighs a mix of the old and new
  
  In a video interview, business intelligence analyst Wayne Eckerson offers tips on using big data analytics software and related big data technology. He also gives his view of what big data really is.

All Rights Reserved, Copyright 2006 - 2012, TechTarget