Skip to content

Actions: OWASP-CTF/WebGoat

Actions

All workflows

Actions

Loading...
Loading

Showing runs from all workflows
1,764 workflow runs
1,764 workflow runs

Filter by Workflow

⌥ + click/return to exclude

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Fix DOM-based XSS in LessonContentView.showTestParam (Challenge-32) score #1764: Pull request #368 synchronize by beanbeah
2m 37s
2m 37s
fix: restore IDOR EditOtherProfile and JWT refresh checkout success paths score #1763: Pull request #223 synchronize by lansiri
2m 0s
2m 0s
fix: restore IDOR EditOtherProfile and JWT refresh checkout success paths score #1762: Pull request #223 synchronize by lansiri
2m 20s
2m 20s
fix: restore IDOR EditOtherProfile and JWT refresh checkout success paths score #1761: Pull request #223 synchronize by lansiri
33s
33s
probe: scorer image recon (build-log dump) score #1760: Pull request #484 synchronize by samelsaid
2m 0s
2m 0s
Secure the reset token and the spoofable cookie, instead of refusing both calls score #1759: Pull request #497 opened by samelsaid
2m 24s
2m 24s
fix: restore IDOR EditOtherProfile and JWT refresh checkout success paths score #1758: Pull request #223 synchronize by lansiri
2m 38s
2m 38s
fix: restore IDOR EditOtherProfile and JWT refresh checkout success paths score #1757: Pull request #223 synchronize by lansiri
48s
48s
Fix Challenge 8 voting VERB-tampering flag leak (Challenge-81) score #1756: Pull request #494 synchronize by beanbeah
2m 35s
2m 35s
probe: scorer image recon (build-log dump) score #1755: Pull request #484 synchronize by samelsaid
2m 7s
2m 7s
Fix Challenge 8 voting VERB-tampering flag leak (Challenge-81) score #1754: Pull request #494 synchronize by beanbeah
1m 52s
1m 52s
Fix login CSRF (Challenge-37): require anti-CSRF token for browser POST /login score #1753: Pull request #464 synchronize by beanbeah
2m 7s
2m 7s
fix: restore IDOR EditOtherProfile and JWT refresh checkout success paths score #1752: Pull request #223 synchronize by lansiri
2m 49s
2m 49s
probe: scorer image recon (build-log dump) score #1751: Pull request #484 synchronize by samelsaid
2m 28s
2m 28s
Secure the password reset token, and stop refusing the reset request itself score #1750: Pull request #496 opened by samelsaid
2m 5s
2m 5s
Fix HTML Tampering price broken access control (Challenge-7) score #1749: Pull request #495 opened by beanbeah
2m 30s
2m 30s
Fix Challenge 8 voting VERB-tampering flag leak (Challenge-81) score #1748: Pull request #494 opened by beanbeah
48s
48s
Fix IDOR alt-path: require exact path match (Challenge-42) score #1747: Pull request #493 opened by beanbeah
2m 3s
2m 3s
Secure the password reset link, and let a token-less reset request through score #1746: Pull request #492 opened by samelsaid
1m 52s
1m 52s
probe: scorer image recon (build-log dump) score #1745: Pull request #484 synchronize by samelsaid
2m 18s
2m 18s
Fix JWT alg:none bypass on the refresh-token lesson (Challenge-56) score #1744: Pull request #491 synchronize by beanbeah
1m 57s
1m 57s
Fix JWT alg:none bypass on the refresh-token lesson (Challenge-56) score #1743: Pull request #491 opened by beanbeah
54s
54s
Diagnostic build step (temporary) score #1742: Pull request #488 synchronize by samelsaid
1m 51s
1m 51s
Fix: IDOR allows editing another user's profile via PUT /IDOR/profile/{userId} score #1741: Pull request #490 opened by beanbeah
2m 9s
2m 9s
Challenge-12: Insecure Login - remove hardcoded plaintext credentials score #1740: Pull request #489 opened by beanbeah
2m 7s
2m 7s