Shulou(Shulou.com)05/31 Report--

This article to share with you is about how to achieve Web security in the WebGoat8.0 environment building, Xiaobian feel quite practical, so share to everyone to learn, I hope you can read this article after some harvest, not much to say, follow Xiaobian to see it.

WebGoat

WebGoat is a JAVA application maintained by OWASP for WEB vulnerability testing and learning.

operating environment

WebGoat 8.0 needs to run in java environment, java version needs at least>=1.8, so first install and configure java.

download

WebGoat 8.0 download address:

https://github.com/WebGoat/WebGoat/releases

WebGoat-server-8.0.0.M26.jar for launching WebGoat

WebWolf-8.0.0.M26.jar is used to start WebWolf (similar to a mail system, receiving cookies, tokens, etc.)

start

Start WebGoat8.0&WebWolf: First, open the cmd command window and switch to the WebGgoat-server-8.0.0.M26.jar directory.

WebGgoat-server-8.0.0.M21.jar is used here, so the difference should not be big.

Then use java -jar webgoat-server-8.0.0.M21.jar --server.port=9091 to start webgoat;server.port=9091. This parameter is set to port 9091. Without this parameter, port 8080 is used by default.

After the following prompt appears, you can basically confirm that WebGoat has successfully started:

Open 127.0.0.1:9091/WebGoat/login.html to see if it really started successfully:

Register a new user by clicking Register new user below. After logging in to WebGoat, you can start learning.

WebWolf's startup method is basically the same. WebWolf's default port is 9090. Login address: 127.0.0.1:9090/WebWolf/login.html. WebWolf's account is connected to WebGoat. WebGoat accounts can log in to WebWolf directly.

skills

When capturing WebGoat packages, because WebGoat starts locally, i.e. 127.0.0.1, you can set BurpSuite to display only 127.0.0.1 traffic.

When WebGoat is running, there will be two requests that are constantly being requested, and they can be removed so as not to affect subsequent operations.

The above is how to achieve WebGoat 8.0 environment construction in Web security, Xiaobian believes that some knowledge points may be seen or used in our daily work. I hope you can learn more from this article. For more details, please follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.