WebGOAT: 1


  • Name: WebGOAT: 1
  • Date release: 16 Sep 2019



Please remember that VulnHub is a free community resource so we are unable to check the machines that are provided to us. Before you download, please read our FAQs sections dealing with the dangers of running unknown VMs and our suggestions for "protecting yourself and your network. If you understand the risks, please download!


WebGOAT.ova

(Size: 1.2 GB)


This is ubuntu 18.04 server which autostarts webgoat on http://<ip address>:8000/WebGoat/

Credentials: - user: webgoat - pass: webgoat

This machine is used to practice on different types of web attacks. Enjoy!


You may have issues importing to VMware


  • Filename: WebGOAT.ova
  • File size: 1.2 GB
  • MD5: F144F3DA6D3BBD0122223C6A32A4B59B
  • SHA1: E31A5DEA43EE50E85E76C999E3D8089C189DB446


  • Format: Virtual Machine (Virtualbox - OVA)
  • Operating System: Linux


  • DHCP service: Enabled
  • IP address: Automatically assign