Dear list We have some free time this week and have added the following movies to our webgoat page - http://yehg.net/lab/pr0js/training/webgoat.php : - CSRF Prompt By-Pass - CSRF Token By-Pass - Off-by-One Buffer Overflow - Blind Numeric SQL Injection - Modify Data with SQL Injection - Add Data with SQL Injection WebGoat 6.0 development is being started now and it needs your contributions. So, if you have some spare time, please contribute. Cheers, YGN Ethical Hacker Group Yangon, Myanmar http://yehg.net