Skip to content

Commit 064c0e8

Browse files
committed
Merge pull request #2 from dcowden/next
Self-contained, multi-platform executable package. Tested on Mac. Works
2 parents 5b2a849 + 8c82cca commit 064c0e8

File tree

1,263 files changed

+60
-467
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

1,263 files changed

+60
-467
lines changed

README.txt

Lines changed: 42 additions & 143 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
**********
2-
********** WebGoat 5.4
3-
********** April/27/2012
2+
********** WebGoat 6.0
3+
********** August 23, 2014
44
**********
55
**
66
** Home Page: http://code.google.com/p/webgoat
@@ -36,27 +36,43 @@ doing security research will not work as that is the first thing
3636
that all hackers claim.
3737

3838
You can find more information about WebGoat at:
39-
http://code.google.com/p/webgoat
40-
39+
https://github.com/WebGoat/
4140

4241
----------------------------------------------------------------------------------------
43-
Prerequisites for Developers (Skip to Option 3 for unzip and click to run configruation)
42+
Easy Run Instructions ( For non-developers )
4443
----------------------------------------------------------------------------------------
44+
Follow these instructions if you simply wish to run WebGoat
45+
46+
Prerequisites: Java VM >= 1.6 installed ( JDK 1.7 recommended)
47+
Download the executable jar file to any location of your choice from:
48+
http://github.com/path/to/download/WebGoat-6.0-exec-war.jar
49+
50+
Run it using java:
51+
java -jar WebGoat-6.0-exec-war.jar
52+
53+
Then navigate in your browser to:
54+
http://localhost:8080/WebGoat
4555

46-
These tools must be installed independent of the webgoat download.
47-
- Java 1.6
48-
Java can ne downloaded at http://java.sun.com/javase/downloads/index.jsp
49-
You only need to download and install the "Java SE Development Kit (JDK)"
50-
- Maven > 2.0.9
51-
Maven can be downloaded at: http://maven.apache.org/
52-
In Ubuntu it can be installed with:
53-
> apt-get install maven2
54-
- WebGoat source code
55-
WebGoat source code can be downloaded at:
56-
http://code.google.com/p/webgoat/source/checkout
57-
Use an svn client (ex: Tortoise svn) to checkout the code in the trunk.
58-
56+
If you would like to change the port or other options, use:
57+
java -jar WebGoat-6.0-exec-war.jar --help
5958

59+
----------------------------------------------------------------------------------------
60+
For Developers
61+
----------------------------------------------------------------------------------------
62+
Follow These instructions if you wish to run Webgoat and modify the source code as well.
63+
64+
Prerequisites:
65+
* Java >= 1.6 ( JDK 1.7 recommended )
66+
* Maven > 2.0.9
67+
*Your favorite IDE, with Maven awareness: Netbeans/IntelliJ/Eclipse with m2e installed
68+
* Git, or Git support in your IDE
69+
70+
WebGoat source code
71+
WebGoat source code can be downloaded at:
72+
https://github.com/WebGoat/WebGoat
73+
74+
If you are setting up an IDE, Netbeans 8.0 contains the Maven and Git support you need:
75+
https://netbeans.org/downloads/
6076

6177
---------------------------------
6278
Building the project (Developers)
@@ -65,132 +81,15 @@ Building the project (Developers)
6581
Using a command shell/window:
6682

6783
> cd webgoat
68-
> mvn compile
69-
70-
copy it to the local repository
71-
> mvn install
72-
73-
delete artifacts from previous build:
74-
> mvn clean
75-
76-
77-
-----------------------------------------------
78-
Building the Eclipse project files (Developers)
79-
-----------------------------------------------
80-
81-
> mvn eclipse:clean
82-
> mvn eclipse:eclipse
83-
84-
Afterward the project can be imported within Eclipse:
85-
File -> Import -> General -> Existing Projects into Workspace
86-
and select the webgoat directory as the "root directory." A webgoat should appear in the Projects section of your dialogue window.
87-
88-
Don't forget to declare a classpath variable named M2_REPO, pointing to ~/.m2/repository, otherwise many links to existing jars will be broken.
89-
This folder is located in your username root folder, the same folder where "my documents" and "my pictures" are located.
90-
You can declare new variables in Eclipse in Windows -> Preferences... and selecting Java -> Build Path -> Classpath Variables
91-
92-
93-
-------------------------------------------------------------------
94-
Option 1: (Developers) Run the project on Tomcat within Eclipse
95-
-------------------------------------------------------------------
96-
97-
Install a local Tomcat server (We use Tomcat 7)
98-
1. Download and unzip Apache Tomcat from http://tomcat.apache.org.
99-
2. Adapt the conf/tomcat-users.xml file of your Tomcat server:
100-
<?xml version="1.0" encoding="UTF-8"?>
101-
<tomcat-users>
102-
<role rolename="webgoat_basic"/>
103-
<role rolename="webgoat_admin"/>
104-
<role rolename="webgoat_user"/>
105-
<role rolename="tomcat"/>
106-
<user password="webgoat" roles="webgoat_admin" username="webgoat"/>
107-
<user password="basic" roles="webgoat_user,webgoat_basic" username="basic"/>
108-
<user password="tomcat" roles="tomcat" username="tomcat"/>
109-
<user password="guest" roles="webgoat_user" username="guest"/>
110-
</tomcat-users>
111-
3. Open Eclipse (WTP version) -> File -> New -> Other -> Server -> Apache
112-
4. Choose your Tomcat version
113-
-> Click next "browse" to your tomcat install.
114-
-> Make sure the "JRE" dropdown is pointing to your jdk. If it isn't listed, press
115-
"Installed JREs" and add it.
116-
-> Click next and add "webgoat" to the list of configured applications
117-
-> Finish
118-
119-
120-
3. Right Click on the webgoat project within eclipse -> Run As -> Run on server
121-
122-
Point your browser to http://localhost:8080/webgoat/attack
123-
** Note - When running in eclipse, the default url will be lowercase "webgoat"
124-
125-
126-
-----------------------------------------------------------
127-
Option 2: (Developers) Run the project on Tomcat with Maven
128-
-----------------------------------------------------------
129-
130-
1. mvn tomcat:run-war
131-
2. http://localhost:8080/WebGoat/attack
132-
133-
134-
------------------------------------------------------------------
135-
Option 3: Run from the WebGoat 5.X Standard distribution (Windows)
136-
------------------------------------------------------------------
137-
138-
1. Download the WebGoat-5.X-OWASP_Standard_Win32.zip file from:
139-
- http://code.google.com/p/webgoat/downloads/list
140-
2. Unzip the file
141-
3. Double click webgoat.bat
142-
4. Browse to http://localhost/WebGoat/attack
143-
144-
** Note: if you receive a bind address error use:
145-
146-
3. Double click webgoat8080.bat
147-
4. Browse to http://localhost:8080/WebGoat/attack
148-
149-
150-
------------------------------------------------------------------
151-
Option 4: Run from the WebGoat 5.X Standard distribution (Ubuntu)
152-
------------------------------------------------------------------
153-
154-
1. Download the WebGoat-5.X-OWASP_Standard_Ubuntu32.zip file from:
155-
- http://code.google.com/p/webgoat/downloads/list
156-
2. Unzip the file
157-
3. run sudu ./webgoat.sh start80
158-
4. Browse to http://localhost/WebGoat/attack
159-
160-
** Note: if you receive a bind address or privilege error:
84+
> mvn clean package
16185

162-
3. run ./webgoat.sh start8080
163-
4. Browse to http://localhost:8080/WebGoat/attack
86+
After opening the project in Netbeans or Eclipse, you can easily run the project using maven:
16487

165-
shutdown the server with:
166-
./webgoat.sh stop
88+
> mvn tomcat:run-war
16789

168-
------------------------------------------------------------------
169-
Option 5: Using the WebgGoat-5.X.war
170-
------------------------------------------------------------------
90+
Maven will run the project in an embedded tomcat.
17191

172-
Windows:
173-
174-
1. Download and install Java 1.6 and Tomcat 7 if needed
175-
2. Download the WebgGoat-5.X.war and README-5.X file from:
176-
- http://code.google.com/p/webgoat/downloads/list
177-
3. Rename WebgGoat-5.X.war to WebgGoat.war
178-
4. Copy WebGoat.war to <tomcat>/webapps/WebGoat.war
179-
5. Modify the <tomcat>/conf/tomcat-users.xml to add in WebGoat users and roles
180-
- see the FAQ for directions
181-
6. Start the tomcat server (default is usually port 8080)
182-
7. Browse to http://localhost:8080/WebGoat/attack
183-
184-
Ubuntu:
185-
186-
1. Install Java 1.6 and Tomcat 7 if needed
187-
- Install java using: sudo apt-get install openjdk-7-jre
188-
- Download Tomcat 7 from http://tomcat.apache.org/download-70.cgi (core tar.gz)
189-
2. Download the WebgGoat-5.X.war and README-5.X file from:
190-
- http://code.google.com/p/webgoat/downloads/list
191-
3. Rename WebgGoat-5.X.war to WebgGoat.war
192-
4. Copy WebGoat.war to <tomcat>/webapps/WebGoat.war
193-
5. Modify the <tomcat>/conf/tomcat-users.xml to add in WebGoat users and roles
194-
- see the FAQ for directions
195-
6. Start the tomcat server (default is usually port 8080)
196-
7. Browse to http://localhost:8080/WebGoat/attack
92+
the package phase also builds an executable jar file. You can run it using:
93+
cd target
94+
java -jar WebGoat-6.0-exec-war.jar
95+
http://localhost:8080/WebGoat

0 commit comments

Comments
 (0)