参考官网https://doc.dongtai.io/docs/getting-started/server/deploy-docker-compose
centos7中使用docker-compost快速部署
1、克隆存储库git clone https://github.com/HXSecurity/DongTai.git
2、更新代码git pull
3、切换至目录cd DongTai/deploy/docker-compose/
4、部署最新版本./dtctl install
二、配置WebGoat环境 1、启动Centos 7 2、安装oracle java 18参考https://blog.csdn.net/qq_16224495/article/details/124488254进行安装jdk18
wget https://download.oracle.com/java/18/archive/jdk-18_linux-x64_bin.tar.gz unzip jdk-18_linux-x64_bin.tar.gz mkdir /usr/local/javacd /usr/local/java tar -zxvf jdk-18_linux-x64_bin.tar.gz mv jdk-18.0.1/ /usr/local/java/
vi /etc/profile #编辑profile文件，追加以下内容
export JAVA_HOME=/usr/local/java/jdk-18.0.1 export CLASSPATH=.:$JAVA_HOME/jre/lib/rt.jar:$JAVA_HOME/lib/dt.jar:$JAVA_HOME/lib/tools.jar export PATH=$PATH:$JAVA_HOME/bin
source /etc/profile
java -version3、下载webgoat
下载最新的webgoat
https://github.com/WebGoat/WebGoat
wget https://github.com/WebGoat/WebGoat/releases/download/v8.2.2/webgoat-server-8.2.2.jar wget https://github.com/WebGoat/WebGoat/releases/download/v8.2.2/webwolf-8.2.2.jar4、启动webgoat
java -jar webgoat-server-8.2.2.jar --server.port=80 --server.address=0.0.0.05、编制脚本iast被动扫描webgoat
startup.sh 内容如下
nohup java -javaagent:agent.jar -Dproject.name=win-webgoat -jar webgoat-server-8.2.2.jar --server.port=80 --server.address=0.0.0.0 &三、检查IAST是否被动扫描
