You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
## The next generation of the WebGoat example project to demonstrate OWASP TOP 10 vulnerabilities
42
+
###The next generation of the WebGoat example project to demonstrate OWASP TOP 10 vulnerabilities
8
43
9
44
This is a re-implementation of the original [WebGoat project for .NET](https://github.com/rappayne/WebGoat.NET).
10
45
11
46
This web application is a learning platform that attempts to teach about
12
47
common web security flaws. It contains generic security flaws that apply to
13
-
most web applications. It also contains lessons that specifically pertain to
48
+
most web applications. It also includes lessons that specifically pertain to
14
49
the .NET framework. The exercises in this app are intended to teach about
15
50
web security attacks and how developers can overcome them.
16
51
17
-
### WARNING!:
52
+
####WARNING!:
18
53
THIS WEB APPLICATION CONTAINS NUMEROUS SECURITY VULNERABILITIES
19
54
WHICH WILL RENDER YOUR COMPUTER VERY INSECURE WHILE RUNNING! IT IS HIGHLY
20
55
RECOMMENDED TO COMPLETELY DISCONNECT YOUR COMPUTER FROM ALL NETWORKS WHILE
21
56
RUNNING!
22
57
23
-
### Notes:
58
+
####Notes:
24
59
- Google Chrome performs filtering for reflected XSS attacks. These attacks
25
-
will not work unless chrome is run with the argument
60
+
will not work unless Chrome is run with the argument
26
61
`--disable-xss-auditor`.
27
62
28
-
## Requirements
63
+
###Requirements
29
64
- .NET 8 SDK
30
65
31
-
## How to build and run
66
+
###How to build and run
32
67
33
-
### 1. Running in a Docker container
68
+
####1. Running in a Docker container
34
69
35
70
The provided Dockerfile is compatible with both Linux and Windows containers.
36
71
To build a Docker image, execute the following command:
@@ -39,19 +74,19 @@ To build a Docker image, execute the following command:
39
74
docker build --pull --rm -t webgoat.net .
40
75
```
41
76
42
-
Please note that Linux image is already built by pipeline and can be pulled from [here](https://github.com/users/tobyash86/packages?repo_name=WebGoat.NET).
77
+
Please note that the Linux image is already built by the pipeline and can be pulled from [here](https://github.com/users/tobyash86/packages?repo_name=WebGoat.NET).
43
78
44
-
#### Linux containers
79
+
#####Linux containers
45
80
46
81
To run the `webgoat.net` image, execute the following command:
47
82
48
83
```sh
49
84
docker run --rm -d -p 5000:80 --name webgoat.net webgoat.net
50
85
```
51
86
52
-
WebGoat.NET website should be accessible at http://localhost:5000.
87
+
The WebGoat.NET website should be accessible at http://localhost:5000.
53
88
54
-
#### Windows containers
89
+
#####Windows containers
55
90
56
91
To run `webgoat.net` image, execute the following command:
57
92
@@ -78,15 +113,15 @@ Ethernet adapter Ethernet:
78
113
79
114
In the above example, you can access the WebGoat.NETCore website at http://172.29.245.43.
80
115
81
-
#### Stopping Docker container
116
+
#####Stopping Docker container
82
117
83
118
To stop the `webgoat.net` container, execute the following command:
84
119
85
120
```sh
86
121
docker stop webgoat.net
87
122
```
88
123
89
-
### 2. Run locally using dotnet.exe (Kestrel)
124
+
####2. Run locally using dotnet.exe (Kestrel)
90
125
91
126
1. Build and publish WebGoat.NET with the following command:
92
127
@@ -102,18 +137,19 @@ The web application will be deployed to the `app` folder in the current director
The the WebGoat.NET website will be accessible at the URL specified with the `--urls` parameter: http://localhost:5000.
140
+
The WebGoat.NET website will be accessible at the URL specified with the `--urls` parameter: http://localhost:5000.
106
141
107
-
### 3. Run using a script
108
-
The WebGoat.NET projects ships with scripts that allow you to conveniently run the web application. The following scripts are located in the the "script" directory in the root of the project:
142
+
####3. Run using a script
143
+
The WebGoat.NET project ships with scripts that allow you to conveniently run the web application. The following scripts are located in the "script" directory in the root of the project:
109
144
- runInDocker.bat - Runs the application in a Docker container on Windows.
110
145
- runInDocker.sh - Runs the application in a Docker container on Linux.
111
146
- runLocal.bat - Runs the application locally on Windows.
112
147
- runLocal.sh - Runs the application locally on Linux.
113
148
114
-
## Known issues:
149
+
###Known issues:
115
150
116
151
1. The latest OWASP Top 10 is not covered. The uncovered vulnerabilities need to be added to the code base.
117
152
2. Educational documents/trainings for any categories of the latest OWASP Top 10 are not available.
0 commit comments