|
| 1 | +# Important Information |
| 2 | + |
| 3 | +Thank you for downloading WebGoat! |
| 4 | + |
| 5 | +This program is a demonstration of common server-side application flaws. The |
| 6 | +exercises are intended to be used by people to learn about application |
| 7 | +penetration testing techniques. |
| 8 | + |
| 9 | +* [Home Page](http://webgoat.github.io) |
| 10 | +* [OWASP Project Home Page](http://www.owasp.org/index.php/Category:OWASP_WebGoat_Project) |
| 11 | +* [Source Code](https://github.com/WebGoat/WebGoat) |
| 12 | +* [Easy-Run Download](https://webgoat.atlassian.net/builds/browse/WEB-DAIL/latestSuccessful/artifact/JOB1/WebGoat-Embedded-Tomcat/WebGoat-6.0-SNAPSHOT-war-exec.jar ) |
| 13 | +* [User Guide](http://code.google.com/p/webgoat/w/list) |
| 14 | +* [FAQ:](http://code.google.com/p/webgoat/wiki/FAQ) |
| 15 | +* [Contact Info - Direct to Bruce Mayhew ]([email protected]) |
| 16 | +* [Mailing List - WebGoat Community - For most questions ]([email protected]) |
| 17 | + |
| 18 | +**WARNING 1:** *While running this program your machine will be extremely |
| 19 | +vulnerable to attack. You should to disconnect from the Internet while using |
| 20 | +this program.* |
| 21 | + |
| 22 | +**WARNING 2:** *This program is for educational purposes only. If you attempt |
| 23 | +these techniques without authorization, you are very likely to get caught. If |
| 24 | +you are caught engaging in unauthorized hacking, most companies will fire you. |
| 25 | +Claiming that you were doing security research will not work as that is the |
| 26 | +first thing that all hackers claim.* |
| 27 | + |
| 28 | +You can find more information about WebGoat at: |
| 29 | +(https://github.com/WebGoat/) |
| 30 | + |
| 31 | + |
| 32 | +# Easy Run Instructions ( For non-developers ) |
| 33 | + |
| 34 | +Follow these instructions if you simply wish to run WebGoat |
| 35 | + |
| 36 | +**Prerequisites:** |
| 37 | + |
| 38 | +Java VM >= 1.6 installed ( JDK 1.7 recommended) |
| 39 | + |
| 40 | +1. Download the executable jar file to any location of your choice: |
| 41 | + |
| 42 | + (https://webgoat.atlassian.net/builds/browse/WEB-WGM/latestSuccessful/artifact/shared/WebGoat-Embedded-Tomcat/WebGoat-6.0.1-war-exec.jar) |
| 43 | + |
| 44 | +2. Run it using java: |
| 45 | + |
| 46 | + > java -jar WebGoat-6.0-exec-war.jar |
| 47 | +
|
| 48 | +3. Then navigate in your browser to: (http://localhost:8080/WebGoat) |
| 49 | + |
| 50 | +4. If you would like to change the port or other options, use: |
| 51 | + |
| 52 | + > java -jar WebGoat-6.0-exec-war.jar --help |
| 53 | +
|
| 54 | + |
| 55 | +# Standard Run Instructions (For Developers) |
| 56 | + |
| 57 | +Follow These instructions if you wish to run Webgoat and modify the source code |
| 58 | +as well. |
| 59 | + |
| 60 | +**Prerequisites:** |
| 61 | + |
| 62 | +* Java >= 1.6 ( JDK 1.7 recommended ) |
| 63 | +* Maven > 2.0.9 |
| 64 | +* Your favorite IDE, with Maven awareness: Netbeans/IntelliJ/Eclipse with m2e |
| 65 | + installed. If you are setting up an IDE, Netbeans 8.0 contains the Maven and |
| 66 | + Git support you need: (https://netbeans.org/downloads/) |
| 67 | +* Git, or Git support in your IDE |
| 68 | + |
| 69 | +**Note:** WebGoat source code can be downloaded at: (https://github.com/WebGoat/WebGoat). |
| 70 | + |
| 71 | + |
| 72 | +1. Building the project (Developers) using a command shell/window: |
| 73 | + |
| 74 | + > cd webgoat |
| 75 | + > mvn clean package |
| 76 | +
|
| 77 | +2. After opening the project in Netbeans or Eclipse, you can easily run the |
| 78 | +project using maven: |
| 79 | + |
| 80 | + > mvn tomcat:run-war |
| 81 | + |
| 82 | +3. Maven will run the project in an embedded tomcat. The package phase also builds an executable jar file. You can run it using: |
| 83 | + |
| 84 | + > cd target |
| 85 | + > java -jar WebGoat-6.0-exec-war.jar http://localhost:8080/WebGoat |
0 commit comments