Work at SourceForge, help us to make it a better place! We have an immediate need for a Support Technician in our San Francisco or Denver office.

Close

#1 How to install WebGoat 2.0??

closed
nobody
None
5
2003-01-14
2003-01-13
Edmund Mitchell
No

Hello
The website (http://www.owasp.org/webgoat/) says, "To
install WebGoat read the installation instructions that
come with the release files."

So, I jar -xvf'ed my install_WebGoat-2.0_unix.jar, and
got an installer directory, and a META-INF dir.

There is a readme.html in the installer dir, but it doesn't
say how to install WebGoat. It talks about buttons that
don't seem to exist.

I then tried to skip ahead, and just put
the /installer/WebGoat-2.0.war file into my Tomcat's
webapps dir, and when I restarted Tomcat and went
to /WebGoat-2.0, and got an index.html that dares me
to deface it.

In the installer dir, there are tons of class files - I'm sure
they do something nice, but what triggers them?

I can't seem to solve the mystery, and it looks like a
very fun app to learn from - can anyone help me install
this app?

Thanks

E

Discussion

    • summary: How to install WebGoat 2.0 --> How to install WebGoat 2.0??
     
  • Bruce Mayhew
    Bruce Mayhew
    2003-01-14

    Logged In: YES
    user_id=666668

    java -jar install_WebGoat-2.0_unix.jar

    You could also copy the war file ( WebGoat-2.0.war ) to the
    webapps dir ( as WebGoat.war ) and then browse to:

    http://localhost:8080/WebGoat/attack

     
  • Logged In: YES
    user_id=449894

    Thanks, Bruce!
    The java -jar install_WebGoat-2.0_unix.jar command didn't
    work - I browsed to my Tomcat install, and clicked install,
    but it blew up -

    temp ->java -jar install_WebGoat-2.0_unix.jar
    Setting property: comp.1.install.dir = /usr/java/tomcat
    java.io.IOException: Stream closed
    at
    java.io.BufferedInputStream.ensureOpen(BufferedInputStream.java:120)
    at
    java.io.BufferedInputStream.read(BufferedInputStream.java:270)
    at installer.InstallTask.copy(InstallTask.java:122)
    at installer.InstallTask.copy(InstallTask.java:101)
    at
    installer.InstallTask.installComponent(InstallTask.java:313)
    at
    installer.InstallTask.distribute(InstallTask.java:150)
    at installer.InstallTask.run(InstallTask.java:331)
    at installer.SwingInstall$1.run(SwingInstall.java:162)
    at java.lang.Thread.run(Thread.java:536)

    I'll submit is as a potential bug, I guess.
    But, just dropping the war file into the webapps dir and
    taking your suggestion of browsing to the /attack url worked
    perfectly - thanks again.

    E

     
    • status: open --> closed