Install webgoat in Windows

1. Install JDK. (jdk-6u21-windows-i586)

2. Install core tomcat. (apache-tomcat-5.5.30.exe)

3. Download and decompress webgoat-owasp_standard-5.3_rc1.7z

4. Run webgoat. BAT and enter http: // localhost/webgoat/attack in the browser bar to enter the logon page. (Webgoat is written on the official website, and W and B must be capitalized ...)

 

After the installation is complete, you can only access the server through 127.0.0.1 or localhost. Other hosts cannot access the server. Use netstat to view the listening port and find that Tomcat only listens to 127.0.0.1: 80. The solution is as follows:

Open tomcat/CONF/server_80.xml in the webgoat directory (or server_808080.xml, check which port you are using ...), Find the following section:

<Connector address = "127.0.0.1" Port = "80" maxhttpheadersize = "8192" maxthreads = "150" minsparethreads = "25" maxsparethreads = "75" enablelookups = "false" redirectport =" 8443 "acceptcount =" 100 "connectiontimeout =" 20000 "disableuploadtimeout =" true "allowtrace =" true "/>

Change address = "127.0.0.1" to address = "0.0.0.0" and restart webgoat.