{"id":24678720,"url":"https://github.com/contrast-security-oss/demo-webgoat7","last_synced_at":"2025-10-11T04:34:58.379Z","repository":{"id":72669597,"uuid":"288154586","full_name":"Contrast-Security-OSS/demo-webgoat7","owner":"Contrast-Security-OSS","description":null,"archived":false,"fork":false,"pushed_at":"2024-01-26T15:32:51.000Z","size":71918,"stargazers_count":2,"open_issues_count":1,"forks_count":7,"subscribers_count":9,"default_branch":"master","last_synced_at":"2025-09-30T18:59:59.496Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Contrast-Security-OSS.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2020-08-17T10:49:25.000Z","updated_at":"2023-02-17T13:47:38.000Z","dependencies_parsed_at":null,"dependency_job_id":"449bd6fb-72e1-48f0-aa48-06125431e339","html_url":"https://github.com/Contrast-Security-OSS/demo-webgoat7","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/Contrast-Security-OSS/demo-webgoat7","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Contrast-Security-OSS%2Fdemo-webgoat7","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Contrast-Security-OSS%2Fdemo-webgoat7/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Contrast-Security-OSS%2Fdemo-webgoat7/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Contrast-Security-OSS%2Fdemo-webgoat7/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Contrast-Security-OSS","download_url":"https://codeload.github.com/Contrast-Security-OSS/demo-webgoat7/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Contrast-Security-OSS%2Fdemo-webgoat7/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278934167,"owners_count":26071364,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-08T02:00:06.501Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-01-26T13:18:03.273Z","updated_at":"2025-10-08T11:31:20.818Z","avatar_url":"https://github.com/Contrast-Security-OSS.png","language":"TypeScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Webgoat 7: A deliberately insecure Java web application\n\nThis sample application is downloaded from https://github.com/WebGoat/WebGoat/releases/download/7.1/webgoat-container-7.1-exec.jar.\n\n**Warning**: The computer running this application will be vulnerable to attacks, please take appropriate precautions.\n\n# Running standalone\n\nYou can run WebGoat locally on any machine with Java 1.8 RE installed.\n\n1. Place a `contrast_security.yaml` file into the application's root folder.\n1. Place a `contrast.jar` into the application's root folder.\n1. Run the application using: \n```sh\njava -javaagent:contrast.jar -Dcontrast.config.path=contrast_security.yaml -jar webgoat-container-7.1-exec.jar [--server.port=8080] [--server.address=localhost] \n```\n1. Browse the application at http://localhost:8080/WebGoat/\n\n# Running in Docker\n\nYou can run WebGoat within a Docker container. \n\n1. Place a `contrast_security.yaml` file into the application's root folder.\n1. Build the WebGoat container image using `./1-Build-Docker-Image.sh`. The Contrast agent is added automatically during the Docker build process.\n1. Run the container using `docker run -v $PWD/contrast_security.yaml:/etc/contrast/java/contrast_security.yaml -p 8080:8080 webgoat:7.1`\n1. Browse the application at http://localhost:8080/WebGoat/\n\n# Running in Azure (Azure Container Instance):\n\n## Pre-Requisites\n\n1. Place a `contrast_security.yaml` file into the application's root folder.\n1. Install Terraform from here: https://www.terraform.io/downloads.html.\n1. Install PyYAML using `pip install PyYAML`.\n1. Install the Azure cli tools using `brew update \u0026\u0026 brew install azure-cli`.\n1. Log into Azure to make sure you cache your credentials using `az login`.\n1. Edit the [variables.tf](variables.tf) file (or add a terraform.tfvars) to add your initials, preferred Azure location, app name, server name and environment.\n1. Run `terraform init` to download the required plugins.\n1. Run `terraform plan` and check the output for errors.\n1. Run `terraform apply` to build the infrastructure that you need in Azure, this will output the web address for the application. If you receive a HTTP 503 error when visiting the app then wait 30 seconds for the application to initialize.\n1. Run `terraform destroy` when you would like to stop the app service and release the resources.\n\n# Running automated tests\n\nThere is a test script which you can use to reveal vulnerabilities which requires node and puppeteer.\n\n1. Install NPM, Node, Chrome and Playwright `npm i playwright`\n1. Run `BASEURL=\u003curl\u003e npx playwright test e2e/assess/*.ts`\n\n## Updating the Docker Image\n\nYou can re-build the docker image (used by Terraform) by running two scripts in order:\n\n* 1-Build-Docker-Image.sh\n* 2-Deploy-Docker-Image-To-Docker-Hub.sh\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcontrast-security-oss%2Fdemo-webgoat7","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcontrast-security-oss%2Fdemo-webgoat7","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcontrast-security-oss%2Fdemo-webgoat7/lists"}