Web security: WebGoat shooting range construction (WEB vulnerability testing and practice)

Web security: WebGoat shooting range construction. 【Running in JAVA environment】

WebGoat is an application platform developed by the OWASP organization for web vulnerability experiments to illustrate the security loopholes in web applications. WebGoat runs on a platform with a java virtual machine, including: cross-site scripting (XSS), access control, thread safety, manipulating hidden fields, manipulating parameters, weak session cookies, SQL blind injection, numeric SQL injection, character String SQL injection, web services, Open Authentication failure, dangerous HTML comments, etc.

---

Table of contents:

Web security: WebGoat shooting range construction. 【Running in JAVA environment】

WebGoat range build:

The installation is successful to visit:

---

环境需要安装 java 环境.

---

WebGoat range build:

环境的下载：

https://github.com/WebGoat/WebGoat/releases

下载完成之后，把它放在目录下，然后执行下面的命令.【进行安装】

java -Dfile.encoding=UTF-8 -Dwebgoat.port=8080 -Dwebwolf.port=9090 -jar webgoat-2023.4.jar

---

The installation is successful to visit:

进行访问 8080 端口：

127.0.0.1:8080/WebGoat/login 

   

   

     

Reference link: Hacking Lab Series Part1 Webgoat installation and operation based on Kali Linux ARM architecture including Java upgrade installation is very simple and practical_哔哩哔哩_bilibili