HOWTO : WebGoat 5.4 on Ubuntu Server 12.04 LTS

Step 1 :



Install Ubuntu Server 12.04 LTS as usual. Select OpenSSH server and Tomcat Server at the end of the installer.



Step 2 :



Download the WebGoat 5.4.



wget http://webgoat.googlecode.com/files/WebGoat-5.4.war



Step 3 :



Copy the WebGoat.war to the Tomcat directory.



mv WebGoat-5.4.war WebGoat.war

sudo cp WebGoat.war /var/lib/tomcat6/webapps/




Step 4 :



Edit the tomcat-users.xml for the WebGoat 5.4.



sudo nano /etc/tomcat6/tomcat-users.xml



Insert the following before tag :





















Step 5 :



Restart Tomcat.



sudo /etc/init.d/tomcat6 restart



Step 6 :



Open a browser (e.g. Firefox) and point to the WebGoat (e.g. 192.168.56.102).



http://192.168.56.102:8080/WebGoat/attack



Enter the username and password for both as "guest".



Tutorial



OWASP WebGoat v5.4 Web Hacking Simulation WalkThrough Series



That's all! See you.