WebGoat Getting Started - Revision history

Bmayhew at 20:22, 28 February 2008

2008-02-28T20:22:39Z

Jeff Williams at 10:30, 14 June 2006

2006-06-14T10:30:55Z

Weilin Zhong at 19:22, 5 June 2006

2006-06-05T19:22:49Z

Weilin Zhong at 19:12, 5 June 2006

2006-06-05T19:12:47Z

Weilin Zhong at 19:03, 5 June 2006

2006-06-05T19:03:43Z

Weilin Zhong at 19:01, 5 June 2006

2006-06-05T19:01:56Z

New page

[[WebGoat User Guide Table of Contents]]
__TOC__

In order to start using WebGoat, Tomcat must be launched using the startup script/bat in the Tomcat bin directory.
For WebGoat to operate it must have permission to run as a server and allow some uncommon web behavior. When WebGoat is running it will make the host machine vulnerable to attack.

If the machine is connected to the internet it should be disconnected.

Running a personal firewall may prevent WebGoat from operating correctly. Disable any personal firewall while running WebGoat.

From a browser, the Tomcat server can be accessed on localhost port 80, e.g. http://127.0.0.1:8080

WebGoat resides in the WebGoat directory, and the lessons can be found at: http://127.0.0.1:8080/WebGoat/attack

[[Image:WebGoat Sign In Page.gif]]

WebGoat resides in the WebGoat directory, and the lessons can be found at: http://127.0.0.1/WebGoat/attack.

The WebGoat application enforces role based security. A login dialog requests credentials. Login as userid=guest, password=guest.

After a successful login the Tomcat server will show the WebGoat welcome page.

[[Image:WebGoat Welcome Page]]

[[WebGoat User Guide Table of Contents]]
[[Category:OWASP WebGoat Project]]

← Older revision		Revision as of 20:22, 28 February 2008
Line 1:		Line 1:
−	[[WebGoat User Guide Table of Contents]]	+	<webgoat/>[[WebGoat User Guide Table of Contents]]
	__TOC__		__TOC__

@@ Line 10: / Line 10: @@
 Running a personal firewall may prevent WebGoat from operating correctly. Disable any personal firewall while running WebGoat.
-From a browser, the Tomcat server can be accessed on localhost port 80, e.g. <u>http://127.0.0.1:8080</u>
+From a browser, the Tomcat server can be accessed on localhost port 80, e.g. <u>http://127.0.0.1</u>
 WebGoat resides in the WebGoat directory, and the lessons can be found at: <u>http://127.0.0.1/WebGoat/attack</u>.

@@ Line 13: / Line 13: @@
 WebGoat resides in the WebGoat directory, and the lessons can be found at: <u>http://127.0.0.1:8080/WebGoat/attack</u>
 WebGoat resides in the WebGoat directory, and the lessons can be found at: <u>http://127.0.0.1/WebGoat/attack</u>.
 The WebGoat application enforces role based security. A login dialog requests credentials. Login as userid=guest, password=guest.
 After a successful login the Tomcat server will show the WebGoat welcome page.
-[[Image:WebGoat Welcome Page.gif|thumb|300px|Center|Figure 2. Welcome Page]]
+[[Image:WebGoat Welcome Page.gif|none|Figure 2. Welcome Page]]
 [[WebGoat User Guide Table of Contents]]
 [[Category:OWASP WebGoat Project]]

@@ Line 14: / Line 14: @@
 WebGoat resides in the WebGoat directory, and the lessons can be found at: <u>http://127.0.0.1:8080/WebGoat/attack</u>
+[[Image:WebGoat Sign In Page.gif|thumb|300px|Center|Figure 1. Sign In Page]]
 WebGoat resides in the WebGoat directory, and the lessons can be found at: <u>http://127.0.0.1/WebGoat/attack</u>.
@@ Line 23: / Line 22: @@
 After a successful login the Tomcat server will show the WebGoat welcome page.
-[[Image:WebGoat Welcome Page.gif]]
+[[Image:WebGoat Welcome Page.gif|thumb|300px|Center|Figure 2. Welcome Page]]
 [[WebGoat User Guide Table of Contents]]
 [[Category:OWASP WebGoat Project]]

← Older revision		Revision as of 19:03, 5 June 2006
Line 23:		Line 23:
	After a successful login the Tomcat server will show the WebGoat welcome page.		After a successful login the Tomcat server will show the WebGoat welcome page.

−	[[Image:WebGoat Welcome Page]]	+	[[Image:WebGoat Welcome Page.gif]]