ryancblack/webgoat

Apache Tomcat Native library - HTTP Status 404 - /WebGoat/attack

Closed this issue · 14 comments

What steps will reproduce the problem?
1. unzip WebGoat-OWASP_Standard-5.3_RC1.7z
2. Run webgoat.bat
3. Go to http://localhost/WebGoat/attack

*What is the expected output? 
A login dialog requests credentials. Then Login as userid=guest, password=guest

*What do you see instead?
*====error message begin====*
HTTP Status 404 - /WebGoat/attack

type Status report

message /WebGoat/attack

description The requested resource (/WebGoat/attack) is not available.
Apache Tomcat/5.5.28
*====error message end====*

*What version of the product are you using?
WebGoat-5.3_RC1

*On what operating system?
Windows XP SP2 (newly reinstalled)

*Please provide any additional information below.
i can see tomcat page when open:
http://127.0.0.1/
http://localhost/

it says:
If you're seeing this page via a web browser, it means you've setup Tomcat
successfully. Congratulations!

but when try to open http://localhost/WebGoat/attack it always gives HTTP
Status 404 error message

when double clicking webgoat.bat:
*====error message begin====*
Dec 15, 2009 10:14:19 AM org.apache.catalina.core.AprLifecycleListener
lifecycle
Event
INFO: The Apache Tomcat Native library which allows optimal performance in
produ
ction environments was not found on the java.library.path:
E:\Documents\H-Focus\
Pentest
Lab\WebGoat\WebGoat-5.3_RC1\java\bin;.;D:\WINDOWS\Sun\Java\bin;D:\WINDOW
S\system32;D:\WINDOWS;D:\WINDOWS\system32;D:\WINDOWS;D:\WINDOWS\System32\Wbem
Dec 15, 2009 10:14:19 AM org.apache.coyote.http11.Http11BaseProtocol init
INFO: Initializing Coyote HTTP/1.1 on http-127.0.0.1-80
Dec 15, 2009 10:14:19 AM org.apache.catalina.startup.Catalina load
INFO: Initialization processed in 438 ms
Dec 15, 2009 10:14:19 AM org.apache.catalina.core.StandardService start
INFO: Starting service Catalina
Dec 15, 2009 10:14:19 AM org.apache.catalina.core.StandardEngine start
INFO: Starting Servlet Engine: Apache Tomcat/5.5.28
Dec 15, 2009 10:14:19 AM org.apache.catalina.core.StandardHost start
INFO: XML validation disabled
Dec 15, 2009 10:14:20 AM org.apache.catalina.startup.HostConfig deployWAR
INFO: Deploying web application archive webgoat.war
Dec 15, 2009 10:14:21 AM org.apache.coyote.http11.Http11BaseProtocol start
INFO: Starting Coyote HTTP/1.1 on http-127.0.0.1-80
Dec 15, 2009 10:14:21 AM org.apache.jk.common.ChannelSocket init
INFO: JK: ajp13 listening on /0.0.0.0:8009
Dec 15, 2009 10:14:21 AM org.apache.jk.server.JkMain start
INFO: Jk running ID=0 time=0/31  config=null
Dec 15, 2009 10:14:21 AM org.apache.catalina.storeconfig.StoreLoader load
INFO: Find registry server-registry.xml at classpath resource
Dec 15, 2009 10:14:21 AM org.apache.catalina.startup.Catalina start
INFO: Server startup in 1281 ms
*====error message end====*


"Dec 15, 2009 10:14:19 AM org.apache.catalina.core.AprLifecycleListener
lifecycle EventINFO: The Apache Tomcat Native library which allows optimal
performance in production environments was not found on the
java.library.path: E:\Documents\H-Focus\Pentest
Lab\WebGoat\WebGoat-5.3_RC1\java\bin;.;D:\WINDOWS\Sun\Java\bin;D:\WINDOWS\system
32;D:\WINDOWS;D:\WINDOWS\system32;D:\WINDOWS;D:\WINDOWS\System32\Wbem"

i know that error message above specify the error, but i cannot find the
answer to fix it, any help would be very appreciate!

when browse i found someone have similar problem but not in running
webgoat, and the replier said that we need to use APR (Apache Portable
Runtime ) (http://tomcat.apache.org/tomcat-5.5-doc/apr.html &
http://tomcat.apache.org/native-doc/) ... i'm really lost on this one ...
help please???

Original issue reported on code.google.com by ligar.pa...@gmail.com on 15 Dec 2009 at 4:15

Try using a lowercase webgoat in the URL: http://localhost/webgoat/attack


Original comment by mayhe...@gmail.com on 15 Dec 2009 at 3:30

  • Changed state: Accepted
  • Added labels: Priority-Critical
  • Removed labels: Priority-Medium
Work like a charm!!!
Thank you very much!!!

Original comment by ligar.pa...@gmail.com on 19 Dec 2009 at 6:30

@ mayhew64: Tx u saved me today :)

Original comment by rajeshsi...@gmail.com on 8 Apr 2010 at 8:38

Solution with lowercase URL works for me as well. 

version: WebGoat-5.3_RC1
platform: linux

Original comment by jar...@gmail.com on 24 Jun 2010 at 6:50

Lower case was the key on my W7 laptop. Thanks, can anyone tell me why?

Original comment by rbuh...@wgu.edu on 30 Dec 2010 at 11:06

Please fix this asap - cost me over an hour before I discovered that this was 
the problem.

Original comment by rhysgrif...@gmail.com on 1 Aug 2011 at 10:26

The readme and all the lessons have been changed to show webgoat as lowercase. 
These fixes will show up next release.

Original comment by X71...@gmail.com on 10 Aug 2011 at 4:18

Worked :D :D Thanks

Original comment by mody.kas...@gmail.com on 18 Sep 2011 at 4:40

Thank you :D

Original comment by anandk1...@gmail.com on 3 Nov 2011 at 5:26

Thank you a lot

So efficient and simple expalnations

Regards

Original comment by zakari.z...@gmail.com on 21 Nov 2011 at 2:28

thank a lot

Original comment by g.good...@gmail.com on 21 Feb 2012 at 5:16

This is probably a can of worms but everything has been changed to work with 
WebGoat with a capital W and G as of 5.4

Original comment by mayhe...@gmail.com on 23 Apr 2012 at 11:05

  • Changed state: Fixed
Have the same problem with WebGoat 5.4. lowercase does not solve the problem

Original comment by namunyak...@gmail.com on 29 Oct 2013 at 7:57

@namunyak...

For WebGoat-5.4 the solution is that in post #12:

http://localhost/WebGoat/attack

Original comment by Marco.Fr...@gmail.com on 11 Feb 2014 at 2:38