Installing WebGoat WAR file into a Standard Tomcat Installation
===============================================================

To do this, you'll need to configure server.xml and tomcat-users.xml a bit. Basically, you'll want to change the port number in server.xml to 80 (or just stick with 8080).  WebGoat also has some specific users and roles that it uses which are defined in tomcat-users.xml. 

- Add the following users to tomcat-users.xml in tomcat/conf directory

<user username="webgoat" password="webgoat" roles="webgoat_admin"/>
<user username="basic" password="basic" roles="webgoat_user,webgoat_basic"/>
<user username="guest" password="guest" roles="webgoat_user"/>
<user username="admin" password="admin" roles="admin,manager"/>

This is explained in the readme.txt file in the root directory.

If you do not rename the war file to WebGoat.war you will need to
browse to:

http://localhost/WebGoat-VERSION_NUM/attack

Let us know if you are still having problems at the WebGoat mailing list: http://lists.sourceforge.net/lists/listinfo/owasp-webgoat.