forked from WebGoat/WebGoat
-
Notifications
You must be signed in to change notification settings - Fork 0
WebGoat is a deliberately insecure application
License
hazanasec/WebGoat
Folders and files
Name | Name | Last commit message | Last commit date | |
---|---|---|---|---|
Repository files navigation
Prerequisites: - Java 1.6 - Maven > 2.0.9 Maven can be downloaded at: http://maven.apache.org/ At Ubuntu it can be installed with: > apt-get install maven2 Building the project ------------------ > cd webgoat > mvn compile copy it to the local repository > mvn install delete artifacts from previous build: > mvn clean Building the Eclipse project files ------------------------------- > mvn eclipse:eclipse Afterward the project can be imported within Eclipse: File -> Import -> General -> Existing Projects into Workspace Don't forget to declare a classpath variable named M2_REPO, pointing to ~/.m2/repository, otherwise many links to existing jars will be broken. You can declare new variables in Eclipse in Windows -> Preferences... and selecting Java -> Build Path -> Classpath Variables Option 1: Run the project on Tomcat within Eclipse --------------------------------------------------- 1. Install a local Tomcat server 2. Open Eclipse -> File -> New -> Other -> Server -> Apache -> Tomcat -> Next -> Insert your Tomcat Installation directory -> Click next and add "webgoat" to the list of configured applications -> Finish 3. Adapt the conf/tomcat-users.xml file of your Tomcat server: <?xml version="1.0" encoding="UTF-8"?> <tomcat-users> <role rolename="webgoat_basic"/> <role rolename="webgoat_admin"/> <role rolename="webgoat_user"/> <role rolename="tomcat"/> <user password="webgoat" roles="webgoat_admin" username="webgoat"/> <user password="basic" roles="webgoat_user,webgoat_basic" username="basic"/> <user password="tomcat" roles="tomcat" username="tomcat"/> <user password="guest" roles="webgoat_user" username="guest"/> </tomcat-users> 4. Right Click on the webgoat project within eclipse -> Run As -> Run on server 5. http://localhost:8080/webgoat/attack Option 2: Run the project on Tomcat with Maven --------------------------------------------------- 1. mvn tomcat:run-war 2. http://localhost:8080/webgoat/attack
About
WebGoat is a deliberately insecure application
Resources
License
Stars
Watchers
Forks
Packages 0
No packages published
Languages
- JavaScript 49.5%
- Java 35.4%
- HTML 11.1%
- CSS 3.7%
- TSQL 0.1%
- Shell 0.1%
- Dockerfile 0.1%