4 WebGoat 8 Setup
I want to download and set up web goat 8. This is an intentionally vulnerable web application created by the great people at OWASP. This has several lessons which are meant to demonstrate how many of the Wasp top ten vulnerabilities are able to be exploited. There's many versions of web goat, but we'll be getting the most recent one. At the time of this recording, the most recent one is version 8. Please keep in mind that at the time of this recording, this version is not completely developed, so some of the lessons are not finished. However, many of the lessons do work and I thought it would be great to cover this since there's limited walkthroughs already posted. For the previous stable version, there's a ton of content already published online. Let's go ahead and download the standalone version. Save file. Go to your downloads folder to start it. Will be typing Java- jar. Name of the web code server jar file we just downloaded. Specify a server port. Server port equals then the value of your desired port. I'm going to put 9090. Now give it a moment to load. Open up Firefox. Type in HTTP localhost.: 1994 slash web goat. Register new user. Type in a username. Password. Agree with the terms and conditions. Sign up. Alright, so that's all there is to it. Please be advised that this machine so should not be publicly exposed to the Internet. With our configuration, it's on an internal network, so the risk is minimal. You can also kill the net interface if desired to ensure 0 Internet connectivity. Now let's continue with the overall lab setup.