Skip to content

Commit a0723fd

Browse files
committed
WEB-126 some additional grammer cleanup and tomcat configuration cleanup
1 parent 6343539 commit a0723fd

File tree

2 files changed

+24
-27
lines changed

2 files changed

+24
-27
lines changed

src/main/webapp/lesson_plans/English/HowToWork.html

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ <h1>How To Work With WebGoat</h1>
66
<h2>Environment Information</h2>
77
<p>
88
WebGoat uses the Apache Tomcat server but can run in any application server. It is configured to run on
9-
localhost although this can be easily changed, see the ""Tomcat Configuration"" section in the Introduction. </p>
9+
localhost although this can be easily changed, see the "Tomcat Configuration" section in the Introduction. </p>
1010

1111
<h2>The WebGoat Interface</h2>
1212
<p>

src/main/webapp/lesson_plans/English/TomcatSetup.html

Lines changed: 23 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -5,20 +5,16 @@ <h2>Introduction</h2>
55
and other possible configurations for Tomcat. This is just
66
a short description which should be enough in most cases. For more advanced tasks please
77
refer to the Tomcat documentation. Please note that all solutions
8-
are written for the standard configurations on port 80. If you use another port you have
8+
are written for the standard configurations on port 80 or 8080. If you use another port you have
99
to adjust the solution to your configuration.</p>
1010

1111
<h2>The Standard Configurations</h2>
12-
<p>There are two standard Tomcat configurations. In the basic configurations you use the server on your localhost.
13-
Both are identically with the only difference
14-
that in one tomcat is running on port 80 and 443 (SSL) and in the other tomcat is running on port 8080 and 8443. In Linux you have
15-
to start WebGoat as root or with sudo if you want to run it on port 80 and
16-
443.
17-
As running software as root is dangerous we strongly advice to use
18-
the port 8080 and 8443. In Windows you can
19-
run WebGoat.bat to run it on port 80 and WebGoat_8080.bat to run it on port 8080. In Linux you
20-
can use webgoat.sh and run it with webgoat.sh start80 or webgoat.sh start8080. The user in these
21-
configurations is guest with password guest
12+
<p>WebGoat has multiple ways of being run. The <a href="https://github.com/WebGoat/WebGoat/wiki/Installation-(WebGoat-6.0)">
13+
WebGoat Wiki</a> is the best place to find the latest configuration instructions.
14+
By default WebGoat will run on port 8080. In the basic configurations you use the server on your localhost.
15+
In Linux you have to start WebGoat as root or with sudo if you want to run it on port 80 and
16+
443. Running software as root is dangerous we strongly advice to use
17+
the port 8080 and 8443.
2218
</p>
2319

2420
<h2>Server Configurations</h2>
@@ -31,46 +27,47 @@ <h2>Server Configurations</h2>
3127

3228
<h3>Change Ports</h3>
3329
<p>
34-
To change the ports open the server_80.xml which you find in tomcat/conf and change the
35-
non-SSL port. If you want to use it on port 8079 for example:
30+
To change the ports open Tomcat's server.xml which you find in tomcat/conf and change the
31+
non-SSL port. If you want to change your
32+
Tomcat server to use it on port 8079 for example:
3633
</p>
3734

3835
<pre>
39-
&lt;!-- Define a non-SSL HTTP/1.1 Connector on port 8079 --&gt;
40-
&lt;Connector address=&quot;127.0.0.1&quot; port=&quot;8079&quot;...
36+
&lt;!-- Define a non-SSL HTTP/1.1 Connector on port 8079 --&gt;
37+
&lt;Connector address=&quot;127.0.0.1&quot; port=&quot;8079&quot;...
4138
</pre>
4239
<p>
4340
You can also change the SSL connector to another port of course.
4441
In this example to port 8442:
4542
</p>
4643
<pre>
47-
&lt;!-- Define a SSL HTTP/1.1 Connector on port 8442 --&gt;
48-
&lt;Connector address=&quot;127.0.0.1&quot; port=&quot;8442&quot;...
44+
&lt;!-- Define a SSL HTTP/1.1 Connector on port 8442 --&gt;
45+
&lt;Connector address=&quot;127.0.0.1&quot; port=&quot;8442&quot;...
4946
</pre>
47+
</p>
48+
You can also modify WebGoat's pom.xml file to change the port. You will need to modify
49+
the tomcat7-maven-plugin plugin configuration.
50+
</p>
5051
<br>
5152

5253
<h3>Make WebGoat Reachable From Another Client</h3>
5354
<p>THIS MAKES IT POSSIBLE TO REALLY ATTACK YOUR SERVER! DO NOT DO THIS
5455
UNTIL YOU KNOW WHAT YOU ARE DOING. THIS CONFIGURATION SHOULD BE ONLY USED IN
5556
SAFE NETWORKS!</p>
56-
<p>By its default configurations WebGoat is only
57+
<p>By its default configuration, WebGoat is only
5758
reachable within the localhost. In a laboratory or a class
5859
there is maybe the need of having a server and a few clients.
5960
In this case it is possible to make WebGoat reachable.
6061
</p>
61-
<p>The reason why WebGoat is only reachable within the localhost is
62-
the parameter address in the connectors for the non-SSL and SSL connection in server_80.xml. It is set
63-
to 127.0.0.1. The applications only listens on the port of this address for
64-
incoming connections if it is set. If you remove this parameter the server listens on all IPs on the
65-
specific port.</p>
6662

67-
<h3>Permit Only Certain Clients Connection</h3>
63+
<h3>Permit Only Certain Client Connection</h3>
6864
<p>
6965
If you have made WebGoat reachable it is reachable for
7066
all clients. If you want to make it reachable only for certain clients specified
71-
by there IP you can archive this by using a 'Remote Address Filter'.
67+
by their IP you can archive this by using a 'Remote Address Filter'.
7268
The filter can be set in a whitebox or blackbox approach. Here is
73-
only discussed the whitebox approach. You have to add following lines to the Host section of web_80.xml:
69+
only discussed the whitebox approach. You have to add following lines to the
70+
Host section of server.xml in your Tomcat server configuration:
7471
</p>
7572
<pre>
7673
&lt;Valve className=&quot;org.apache.catalina.valves.RemoteAddrValve&quot;

0 commit comments

Comments
 (0)