Thank you for downloading WebGoat!

This program is a demonstration of common server-side application flaws. The exercises are intended to be used by people to learn about application penetration testing techniques.

This repo is a readily available docker image for WebGoat 5.3 docker run --name webgoat --rm -p 8080:8080 robertobarreda/webgoat-legacy

Run webscarab using openjdk-11-jre: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -jar webscarab.jar

WARNING 1: While running this program your machine will be extremely vulnerable to attack. You should to disconnect from the Internet while using this program.

WARNING 2: This program is for educational purposes only. If you attempt these techniques without authorization, you are very likely to get caught. If you are caught engaging in unauthorized hacking, most companies will fire you. Claiming that you were doing security research will not work as that is the first thing that all hackers claim.

You can find more information about WebGoat at: http://code.google.com/p/webgoat