Reference: Http://wenku.baidu.com/link?url=Qg8GOqw6-CK92-3Dgrm608TlJjDtKMLU9ZlC73Js9LD2FZFgqdHEfJ2sTIRCae_ Pvqzu-b6h1od2xxbg5aloyedd6c9ytbh4gxm1rttsihs
Webgoat requires a Java environment, so you need to install the JDK first and configure the appropriate environment variables, in the following steps:
1, the JDK environment variable configuration:
A.) New variable name: java_home, Variable value: C:\Program files\java\jdk1.7.0_71 (Path of installed JDK)
B.) Open path, add variable value:%java_home%\bin;%java_home%\jre\bin
C.) New variable name: CLASSPATH, Variable value:.; %java_home%\lib\dt.jar;%java_home%\lib\tools.jar
***************************************************************************************
-. Represents the current path,%java_home% is referring to the previously specified java_home;
-Java_home indicates the JDK installation path, which includes folders such as Lib,bin,jre, Tomcat,eclipse, and so on, which need to rely on this variable.
-Path allows the system to identify Java commands under any path.
-Classpath is the Java load class or lib path, and only the class is in Classpath, the Java command is recognized.
-Test JDK Enter the Javac,java,javadoc command under the cmd command
***************************************************************************************
2. Configuring the Tomcat environment variable
In the extracted Webgoat folder there is a Tomcat folder, where there is webgoat Network Vulnerability Learning Course Ontology
A.) New variable name: catalina_base, Variable Value: C:\...\webgoat-5.4\tomcat (the variable value is Tomcat's path, open the extracted WebGoat folder, which comes with Tomcat)
B.) New variable name: catalina_home, Variable Value: C:\...\webgoat-5.4\tomcat (IBID.)
C.) Open path, add variable value:%catalina_home%\lib;%catalina_home%\bin
3. Open Tomcat
A. Because you are not using the installation version of Tomcat, you cannot open Tomcat in the service, so enter CMD,CD into the Tomcat bin directory, enter Service.bat install, and the first installation will prompt for installation.
B.) still in the CMD interface above, enter startup, and a Tomcat box will pop up later. This tomcat box does not flash away, indicating that the Tomcat service has started.
C.) Enter the Webgoat folder and open webgoat_8080.bat,tomcat default is 8080 port. If none of the above errors occur, a tomcat window pops up to indicate that the service is started.
4. Running Webgoat
A.) Open the browser, enter http://localhost:8080/, and the following page appears to indicate that the Tomcat service has started successfully
B.) The input http://localhost:8080/WebGoat/attack will appear authentication, the different system and browser pop-up box style is not the same, but authentication is the same. Both the user name and password are guest:
C.) When the login is complete, the following interface appears, indicating that the Webgoat installation is complete!
"Security test" Webgoat installation