1.check java version
java -version
2.install owasp
WebGoat 下載 https://github.com/WebGoat/WebGoat/releases
3.執行
chmod +x webgoat-server-8.0.0.M21.jar
java -jar webgoat-server-8.0.0.M21.jar
reference from http://shaurong.blogspot.com/2018/06/owasp-webgoat-80.html
4.打開瀏覽器 127.0.0.1:8080/WebGoat
5.安裝 zap (reference from http://techdiscussionforum.blogspot.com/2017/08/how-to-install-zap-zed-attack-proxy-in.html)
1.下載 zap
https://github.com/zaproxy/zaproxy/wiki/Downloads
2.解壓縮 linux package (ZAP_2.7.0_Linux.tar.gz)
3. ./zap.sh