How To Install WebGoat On BT5

WebGoat is a web application written in Java language with deliberate security holes for purpose of teaching security lessons using a web application. The WebGoat is maintained by OWASP (Open Web Application Security Project).

The main lessons in the WebGoat application include Cross site scripting, SQL injection, Thread safety, Hidden Form Fields, Web Services, Weak Session Cookies etc.

The WebGoat is designed to be a de-facto interactive learning environment for web application security and is being developed further to become a security benchmarking platform and a Java-based Web site Honeypot.

if you have had webgoat install file you can run it  on  your system directly.. if have not it you can  download Here

after download extract the webgoat file using command :

root@bt:~#7z x WebGoat-OWASP_Standard-5.3_RC1.7z    

then move the extract file to /pentest/web/ :

root@bt:~#mv WebGoat-5.3_RC1 /pentest/web

after moved go into the directory  /pentest/web/WebGoat-5.3_RC1

then execute command # chmod +x webgoat.sh to make webgoat to be exetcuable

root@bt:/pentest/web/WebGoat-5.3_RC1# ls -l

total 32

drwx------  6 root root 4096 2009-11-11 00:23 java

-rw-r--r--  1 root root 4675 2009-11-11 00:03 readme.txt

drwx------ 11 root root 4096 2009-11-10 14:08 tomcat

-rw-r--r--  1 root root  681 2009-11-10 22:06 webgoat_8080.bat

-rw-r--r--  1 root root  679 2009-11-10 22:05 webgoat.bat

-rw-r--r--  1 root root  951 2009-11-08 18:56 webgoat for SQL Server.bat

-rwxr-xr-x  1 root root 1708 2009-11-08 18:56 webgoat.sh

root@bt:/pentest/web/WebGoat-5.3_RC1# ls -l

total 32

drwx------  6 root root 4096 2009-11-11 00:23 java

-rw-r--r--  1 root root 4675 2009-11-11 00:03 readme.txt

drwx------ 11 root root 4096 2009-11-10 14:08 tomcat

-rw-r--r--  1 root root  681 2009-11-10 22:06 webgoat_8080.bat

-rw-r--r--  1 root root  679 2009-11-10 22:05 webgoat.bat

-rw-r--r--  1 root root  951 2009-11-08 18:56 webgoat for SQL Server.bat

-rwxr-xr-x  1 root root 1708 2009-11-08 18:56 webgoat.sh

now run webgoat using command :

root@bt:/pentest/web/WebGoat-5.3_RC1# sh webgoat.sh start80

Using CATALINA_BASE:   ./tomcat

Using CATALINA_HOME:   ./tomcat

Using CATALINA_TMPDIR: ./tomcat/temp

Using JRE_HOME:        /usr/lib/jvm/java-6-openjdk/bin/../

Using CLASSPATH:       ./tomcat/bin/bootstrap.jar

  Open http://127.0.0.1/WebGoat/attack

  Username: guest

  Password: guest

  Or try http://guest:guest@127.0.0.1/WebGoat/attack 

if webgoat have running, open your web browser :

than write url http://127.0.0.1/WebGoat/attack

you will met username and password enter...

enter username : guest

password :guest 

try until you can ..!!!