WebGoat linux

### WebGoat Installation and Usage on Linux For installing and using WebGoat on a Linux environment, the process involves several key steps that ensure proper setup of this educational tool designed to teach web application security lessons. #### Prerequisites Before proceeding with the installation of WebGoat, it is necessary to have Java installed since WebGoat runs as a Java application. One can verify if Java is already present by executing `java -version` in the terminal. If not available, install OpenJDK or Oracle JDK depending upon preference[^1]. ```bash sudo apt update && sudo apt install default-jdk ``` #### Downloading WebGoat The latest version of WebGoat should be downloaded from its official GitHub repository or website. This ensures obtaining an up-to-date copy which includes recent fixes and features added by developers. ```bash wget https://github.com/WebGoat/WebGoat/releases/download/8.0/webgoat-server-8.0.jar ``` #### Running WebGoat Once downloaded, running WebGoat requires specifying sufficient heap space for optimal performance during exercises. Use the command below where `-Xmx512m` allocates memory accordingly: ```bash java -jar webgoat-server-8.0.jar --spring.profiles.active=WebGoat ``` This starts the server locally at port 8080 typically unless specified otherwise within configuration files or through additional parameters passed along while invoking java jar file execution. #### Accessing WebGoat Interface After starting successfully without errors, open any modern browser navigating towards `http://localhost:8080/WebGoat`. Here users will find instructions guiding them further into creating accounts before diving straight into learning modules covering various aspects related specifically but not limited only around OWASP Top Ten vulnerabilities found commonly across insecure applications today. #### Configuration Adjustments (Optional) Depending on network settings or requirements outside standard localhost deployment scenarios, adjustments might need making inside properties files located under resources folder bundled together alongside executable JAR archive provided officially via downloads section mentioned earlier above here too.