From f69e73e31bac5755c502e794c5b4b349a6c47f79 Mon Sep 17 00:00:00 2001 From: Rupak Biswas Date: Fri, 2 Sep 2022 10:27:15 +0530 Subject: [PATCH] minor fixes in sans section --- .../templates/introduction/base.html | 161 +++++++++++++++++- 1 file changed, 154 insertions(+), 7 deletions(-) diff --git a/pygoat/introduction/templates/introduction/base.html b/pygoat/introduction/templates/introduction/base.html index 6cb72a0ed..e1fcaf797 100644 --- a/pygoat/introduction/templates/introduction/base.html +++ b/pygoat/introduction/templates/introduction/base.html @@ -190,14 +190,161 @@

PyGoat

SANS 25 Vulns +
  • + + + S1 : Out-of-bounds Write + +
    • +
  • + + + S2 : Improper Neutralization of Input During Web Page Generation + +
    • +
  • + + + S3 : SQL Injection + +
    • +
  • + + + S4 : Improper Input Validation + +
    • +
  • + + + S5 : Out of bounds write + +
    • +
  • + + + S6 : OS Command Injection + +
    • +
  • + + + S7 : Use After Free + +
    • +
  • + + + S8 : Path Traversal + +
    • +
  • + + + S9 : CSRF + +
    • +
  • + + + S10 : Unrestricted Upload of File with Dangerous Type + +
    • +
  • + + + S11 : Null Pointer Referernece + +
    • +
  • + + + S12 : Deserialization of Untrusted Data + +
    • +
  • + + + S13 : Interger Overflow or Wraparround + +
    • +
  • + + + S14 : Improper Authentication + +
    • + +
  • + + + S15 : User of Hardcoded credential + +
    • +
  • + + + S16 : Missing Autherization + +
    • + +
  • + + + S17 : Command Injection + +
    • +
  • + + + S18 : Missing Authentication for Critical Function + +
    • +
  • + + + S19 : Improper Restriction of Operations within the Bounds of a Memory Buffer + +
    • + +
  • + + + S20 : Incorrect Default Permission + +
    • +
  • + + + S21 : Server Side Request Forgery + +
    • +
  • + + + S22 : Concurrent Execution using Shared Resource with Improper Synchronization + +
    • +
  • + + + S23 : Uncontrolled Resource Comsumption + +
    • +
  • + + + S24 : Improper Restriction of XML External Entity Reference + +
    • +
  • + + + S25 : Code Injection + +
    • +