|
Size: 1109
Comment:
|
Size: 1188
Comment:
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 6: | Line 6: |
| Below is a list of subpages for NetworkSecurity | |
| Line 7: | Line 8: |
| * [[NetworkSecurity/Lab]] |
CPTR 427 Network Security Class
Below is a list of subpages for NetworkSecurity
Using WebScarab with WebGoat
Start up WebScarab. It may be in basic mode.
If it is, Go to Tools->Use Full Interface.
Restart WebScarab.
Fire up IE and go to Tools->Internet Options->Connections->LAN settings.
- Check Use proxy server and set address to localhost port 8008.
- Click OK and OK.
On WebScarab go to Proxy->Manual Edit. Check Intercept Requests. Select GET and POST (using the CTRL key to select both).
In IE go to http://localhost./WebGoat/attack. (notice the dot after localhost, it is required to apply proxy settings on localhost.) WebScarab should already start intercepting. The lessons should work after that. I was able to do a command injection following the steps in the solution. I have now put the proxy settings back to the way they were and shut down WebGoat (for security reasons, not sure if that was necessary but I did it.)