This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "WebGoat Installation"

From OWASP
Jump to: navigation, search
m (Installing to Linux: Formatting of start and stop command was off)
Line 7: Line 7:
  
 
==Installing Java and Tomcat ==
 
==Installing Java and Tomcat ==
# <This section may not be needed, update for v4>
+
===Installing Java===
 +
# Install and deploy the approprite version from http://java.sun.com/downloads/ (1.4.1 or later)
 +
 
 +
===Installing Tomcat===
 +
# Install and deploy core Tomcat from http://tomcat.apache.org/download-55.cgi
  
 
==Installing to Windows ==
 
==Installing to Windows ==
Line 15: Line 19:
  
 
==Installing to Linux ==
 
==Installing to Linux ==
* 1. Download and install Java JDK 1.5 from Sun (http://java.sun.com)
+
# Unzip the Unix_WebGoat-x.x.zip to your working directory
* 2. Unzip the Unix_WebGoat-x.x.zip to your working directory
+
# Edit the following line in webgoat.sh, set JAVA_HOME to your JDK1.5 path.  
* 3. Edit the following line in webgoat.sh, set JAVA_HOME to your JDK1.5 path.  
 
 
   JAVA_HOME="SET ME TO YOUR JAVA 1.5 JDK PATH"
 
   JAVA_HOME="SET ME TO YOUR JAVA 1.5 JDK PATH"
* 4. Since the latest version runs on a privileged port, you will need to start/stop WebGoat as root.
+
# Since the latest version runs on a privileged port, you will need to start/stop WebGoat as root.
  
 
  sudo sh webgoat.sh start
 
  sudo sh webgoat.sh start

Revision as of 02:36, 24 December 2006

WebGoat User Guide Table of Contents

WebGoat is a platform independent environment. It utilizes Apache Tomcat and the JAVA development environment. Installers are provided for Microsoft Windows and UN*X environments, together with notes for installation on other platforms.

Installing Java and Tomcat

Installing Java

  1. Install and deploy the approprite version from http://java.sun.com/downloads/ (1.4.1 or later)

Installing Tomcat

  1. Install and deploy core Tomcat from http://tomcat.apache.org/download-55.cgi

Installing to Windows

  1. Unzip the Windows_WebGoat-x.x.zip to your working environment
  2. To start Tomcat, browse to the WebGoat directory unzipped above and double click "webgoat.bat"
  3. Start your browser and browse to: http://localhost/WebGoat/attack This link is case-sensitive. Make sure to use a large ‘W’ and ‘G’.

Installing to Linux

  1. Unzip the Unix_WebGoat-x.x.zip to your working directory
  2. Edit the following line in webgoat.sh, set JAVA_HOME to your JDK1.5 path.
 JAVA_HOME="SET ME TO YOUR JAVA 1.5 JDK PATH"
  1. Since the latest version runs on a privileged port, you will need to start/stop WebGoat as root.
sudo sh webgoat.sh start
sudo sh webgoat.sh stop

Installing to OS X (Tiger 10.4+)

  1. Unzip the Unix_WebGoat-x.x.zip to your working directory
  2. Since the latest version runs on a privileged port, you will need to start/stop WebGoat as root.

sudo sh webgoat.sh start sudo sh webgoat.sh stop

Running

  1. Start your browser and browse to: http://localhost/WebGoat/attack. Notice the capital 'W' and 'G'
  2. Login in as: user = guest, password = guest

Building

Skip these steps if you just want to run WebGoat <this section is incomplete>


WebGoat User Guide Table of Contents

This article is a stub. You can help OWASP by expanding it or discussing it on its Talk page.