WebGoat/ webgoat/main/WAR Installation Instructions.txt
mayhew64 fd9b60f98e Added some files required to build OWASP release.
Modified License text and format to reflect GPL license.
Reformatted most of the code.

git-svn-id: http://webgoat.googlecode.com/svn/trunk@60 4033779f-a91e-0410-96ef-6bf7bf53c507
2007-01-16 14:56:40 +00:00

21 lines
1.0 KiB
Plaintext

Installing WebGoat WAR file into a Standard Tomcat Installation
===============================================================
To do this, you'll need to configure server.xml and tomcat-users.xml a bit. Basically, you'll want to change the port number in server.xml to 80 (or just stick with 8080). WebGoat also has some specific users and roles that it uses which are defined in tomcat-users.xml.
- Add the following users to tomcat-users.xml in tomcat/conf directory
<user username="webgoat" password="webgoat" roles="webgoat_admin"/>
<user username="basic" password="basic" roles="webgoat_user,webgoat_basic"/>
<user username="guest" password="guest" roles="webgoat_user"/>
<user username="admin" password="admin" roles="admin,manager"/>
This is explained in the readme.txt file in the root directory.
If you do not rename the war file to WebGoat.war you will need to
browse to:
http://localhost/WebGoat-VERSION_NUM/attack
Let us know if you are still having problems at the WebGoat mailing list: http://lists.sourceforge.net/lists/listinfo/owasp-webgoat.