OWASP WEBGOAT

INCS 775 Data Center Security

Summer 2018

Lab 1 – OWASP WebGoat

OWASP WebGoat is a deliberately insecure application that allows developers and security

researchers to test vulnerabilities commonly found in Java-based applications that use common

and popular open source components. In this assignment we will be using tools on Kali Linux to

allow exploitation of such vulnerabilities.

1. Download, install, and run the OWASP Broken Web Apps VMware machine.

2. Use a browser on Kali Linux machine to access the WebGoat interface. Login as

userid=guest, password=guest.

3. Make use of the WebScarab proxy to alter HTTP requests as required by the WebGoat

lessons.

4. Try the different Lessons, review provided solutions.

Prepare a report summarizing your activities.