logo
docker.io/webgoat/webgoat:2026
linux/amd64 docker.io 韓仙森 贡献

这是一个OWASP WebGoat的Docker镜像。WebGoat是一个免费的、开放源码的Web应用程序,旨在帮助安全专业人员和开发人员学习常见的Web应用程序安全漏洞。

通过这个镜像,用户可以在一个隔离的环境中安全地运行WebGoat,练习识别和防范诸如SQL注入、跨站点脚本(XSS)、跨站点请求伪造(CSRF)等漏洞。

它提供了一个方便易用的方式来学习和实践Web安全知识,无需在本地系统上进行复杂的配置。

10
浏览次数
560.27MB
镜像大小
国内镜像
swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/webgoat/webgoat:2026
源镜像
docker.io/webgoat/webgoat:2026
镜像ID
sha256:f1fc6bcdc771b2c9ba20fd3c8cbf112ec8839a719b8400dd053d9d6d3265ec97
镜像 TAG
2026
镜像大小
560.27MB
平台架构
linux/amd64
镜像源
docker.io
CMD
启动入口
java -Duser.home=/home/webgoat -Dfile.encoding=UTF-8 --add-opens java.base/java.lang=ALL-UNNAMED --add-opens java.base/java.util=ALL-UNNAMED --add-opens java.base/java.lang.reflect=ALL-UNNAMED --add-opens java.base/java.text=ALL-UNNAMED --add-opens java.desktop/java.beans=ALL-UNNAMED --add-opens java.desktop/java.awt.font=ALL-UNNAMED --add-opens java.base/sun.nio.ch=ALL-UNNAMED --add-opens java.base/java.io=ALL-UNNAMED --add-opens java.base/java.util=ALL-UNNAMED --add-opens java.base/sun.nio.ch=ALL-UNNAMED --add-opens java.base/java.io=ALL-UNNAMED -Drunning.in.docker=true -jar webgoat.jar --server.address 0.0.0.0
工作目录
/home/webgoat
OS/平台
linux/amd64
镜像创建
2026-08-09T11:53:01.062158541Z
同步时间
2026-09-03 15:20
浏览量
10 次
贡献者
avatar 韓仙森
🔌 开放端口 2
8080/tcp 9090/tcp
⚙️ 环境变量 7
KeyValue
PATH=/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin 0
JAVA_HOME=/opt/java/openjdk 1
LANG=en_US.UTF-8 2
LANGUAGE=en_US:en 3
LC_ALL=en_US.UTF-8 4
JAVA_VERSION=jdk-25.0.3+9 5
TZ=Europe/Amsterdam 6
🏷️ 镜像标签 4
KeyValue
1.43.0 io.buildah.version
WebGoat team maintainer
WebGoat: A deliberately insecure Web Application name
24.04 org.opencontainers.image.version
🛡️ 镜像安全扫描
ubuntu 24.04 Trivy 2026-09-03 15:20 查看完整报告
34
低危 LOW
145
中危 MEDIUM
22
高危 HIGH
1
严重 CRITICAL
受影响目标 (2)
docker.io/webgoat/webgoat:2026 (ubuntu 24.04) ubuntu Java jar

Docker拉取命令

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/webgoat/webgoat:2026
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/webgoat/webgoat:2026  docker.io/webgoat/webgoat:2026

Containerd拉取命令

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/webgoat/webgoat:2026
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/webgoat/webgoat:2026  docker.io/webgoat/webgoat:2026

Shell快速替换命令

sed -i 's#webgoat/webgoat:2026#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/webgoat/webgoat:2026#' deployment.yaml

Ansible快速分发-Docker

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/webgoat/webgoat:2026 && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/webgoat/webgoat:2026  docker.io/webgoat/webgoat:2026'

Ansible快速分发-Containerd

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/webgoat/webgoat:2026 && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/webgoat/webgoat:2026  docker.io/webgoat/webgoat:2026'

镜像构建历史


# 2026-08-09 19:53:01  0.00B 
/bin/sh -c #(nop) HEALTHCHECK --interval=5s --timeout=3s   CMD curl --fail http://localhost:8080/WebGoat/actuator/health || exit 1
                        
# 2026-08-09 19:53:01  0.00B 
/bin/sh -c #(nop) ENTRYPOINT [ "java",    "-Duser.home=/home/webgoat",    "-Dfile.encoding=UTF-8",    "--add-opens", "java.base/java.lang=ALL-UNNAMED",    "--add-opens", "java.base/java.util=ALL-UNNAMED",    "--add-opens", "java.base/java.lang.reflect=ALL-UNNAMED",    "--add-opens", "java.base/java.text=ALL-UNNAMED",    "--add-opens", "java.desktop/java.beans=ALL-UNNAMED",    "--add-opens", "java.desktop/java.awt.font=ALL-UNNAMED",    "--add-opens", "java.base/sun.nio.ch=ALL-UNNAMED",    "--add-opens", "java.base/java.io=ALL-UNNAMED",    "--add-opens", "java.base/java.util=ALL-UNNAMED",    "--add-opens", "java.base/sun.nio.ch=ALL-UNNAMED",    "--add-opens", "java.base/java.io=ALL-UNNAMED",    "-Drunning.in.docker=true",    "-jar", "webgoat.jar", "--server.address", "0.0.0.0" ]
                        
# 2026-08-09 19:53:00  0.00B 
/bin/sh -c #(nop) WORKDIR /home/webgoat
                        
# 2026-08-09 19:53:00  0.00B 
/bin/sh -c #(nop) ENV TZ=Europe/Amsterdam
                        
# 2026-08-09 19:53:00  0.00B 
/bin/sh -c #(nop) EXPOSE 9090
                        
# 2026-08-09 19:53:00  0.00B 
/bin/sh -c #(nop) EXPOSE 8080
                        
# 2026-08-09 19:53:00  160.44MB 
/bin/sh -c #(nop) COPY file:925f947f201d917397904cbe4bb2bc5544586c7351cd74c7dd10b60fb37c7fd9 in /home/webgoat/webgoat.jar      
                        
# 2026-08-09 19:52:59  0.00B 
/bin/sh -c #(nop) USER webgoat
                        
# 2026-08-09 19:52:59  9.67KB 
/bin/sh -c   useradd -ms /bin/bash webgoat &&   chgrp -R 0 /home/webgoat &&   chmod -R g=u /home/webgoat
                        
# 2026-08-09 19:52:59  0.00B 
/bin/sh -c #(nop) LABEL maintainer="WebGoat team"
                        
# 2026-08-09 19:52:59  0.00B 
/bin/sh -c #(nop) LABEL name="WebGoat: A deliberately insecure Web Application"
                        
# 2026-08-04 09:28:17  0.00B 设置默认要执行的命令
CMD ["jshell"]
                        
# 2026-08-04 09:28:17  0.00B 配置容器启动时运行的命令
ENTRYPOINT ["/__cacert_entrypoint.sh"]
                        
# 2026-08-04 09:28:17  5.31KB 复制新文件或目录到容器中
COPY --chmod=755 entrypoint.sh /__cacert_entrypoint.sh # buildkit
                        
# 2026-08-04 09:28:17  0.00B 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux;     echo "Verifying install ...";     fileEncoding="$(echo 'System.out.println(System.getProperty("file.encoding"))' | jshell -s -)"; [ "$fileEncoding" = 'UTF-8' ]; rm -rf ~/.java;     echo "javac --version"; javac --version;     echo "java --version"; java --version;     echo "Complete." # buildkit
                        
# 2026-08-04 09:28:16  264.06MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux;     ARCH="$(dpkg --print-architecture)";     case "${ARCH}" in        amd64)          ESUM='69264a7a211bf5029830d07bc3370f879769d62ebc5b5488e90c9343a2da0e1f';          BINARY_URL='https://github.com/adoptium/temurin25-binaries/releases/download/jdk-25.0.3%2B9/OpenJDK25U-jdk_x64_linux_hotspot_25.0.3_9.tar.gz';          ;;        arm64)          ESUM='3e4287cb98870ba824ed698854bdc27cff984254caf66dd12cc291e7bfdde26b';          BINARY_URL='https://github.com/adoptium/temurin25-binaries/releases/download/jdk-25.0.3%2B9/OpenJDK25U-jdk_aarch64_linux_hotspot_25.0.3_9.tar.gz';          ;;        ppc64el)          ESUM='72b0fbb201716ca465ab704ec0fb12971abab3fdde5ae8d03b125a273522cf05';          BINARY_URL='https://github.com/adoptium/temurin25-binaries/releases/download/jdk-25.0.3%2B9/OpenJDK25U-jdk_ppc64le_linux_hotspot_25.0.3_9.tar.gz';          ;;        riscv64)          ESUM='3b23af7f7dfe82e1dc66509cb825d82d08372f2e7f66ae85a7fdb42a4c84bfcc';          BINARY_URL='https://github.com/adoptium/temurin25-binaries/releases/download/jdk-25.0.3%2B9/OpenJDK25U-jdk_riscv64_linux_hotspot_25.0.3_9.tar.gz';          ;;        s390x)          ESUM='24b497d10acb6ee706ca30e1c8a929785c250cad54c5c12f1f8f93c3c06a53f7';          BINARY_URL='https://github.com/adoptium/temurin25-binaries/releases/download/jdk-25.0.3%2B9/OpenJDK25U-jdk_s390x_linux_hotspot_25.0.3_9.tar.gz';          ;;        *)          echo "Unsupported arch: ${ARCH}";          exit 1;          ;;     esac;     savedAptMark="$(apt-mark showmanual)";     apt-get update;     apt-get install -y --no-install-recommends wget gnupg;     wget --progress=dot:giga -O /tmp/openjdk.tar.gz ${BINARY_URL};     wget --progress=dot:giga -O /tmp/openjdk.tar.gz.sig ${BINARY_URL}.sig;     export GNUPGHOME="$(mktemp -d)";     gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 3B04D753C9050D9A5D343F39843C48A565F8F04B;     gpg --batch --verify /tmp/openjdk.tar.gz.sig /tmp/openjdk.tar.gz;     rm -rf "${GNUPGHOME}" /tmp/openjdk.tar.gz.sig;     echo "${ESUM} */tmp/openjdk.tar.gz" | sha256sum -c -;     mkdir -p "$JAVA_HOME";     tar --extract         --file /tmp/openjdk.tar.gz         --directory "$JAVA_HOME"         --strip-components 1         --no-same-owner     ;     rm -f /tmp/openjdk.tar.gz ${JAVA_HOME}/lib/src.zip;     apt-mark auto '.*' > /dev/null;     apt-mark manual $savedAptMark > /dev/null;     apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false;     rm -rf /var/lib/apt/lists/*;     find "$JAVA_HOME/lib" -name '*.so' -exec dirname '{}' ';' | sort -u > /etc/ld.so.conf.d/docker-openjdk.conf;     ldconfig;     java -Xshare:dump; # buildkit
                        
# 2026-08-04 09:27:59  0.00B 设置环境变量 JAVA_VERSION
ENV JAVA_VERSION=jdk-25.0.3+9
                        
# 2026-08-04 09:27:59  57.60MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux;     apt-get update;     DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends         fontconfig         ca-certificates p11-kit         binutils         tzdata         locales     ;     echo "en_US.UTF-8 UTF-8" >> /etc/locale.gen;     locale-gen en_US.UTF-8;     rm -rf /var/lib/apt/lists/* # buildkit
                        
# 2026-08-04 09:27:59  0.00B 设置环境变量 LANG LANGUAGE LC_ALL
ENV LANG=en_US.UTF-8 LANGUAGE=en_US:en LC_ALL=en_US.UTF-8
                        
# 2026-08-04 09:27:59  0.00B 设置环境变量 PATH
ENV PATH=/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
                        
# 2026-08-04 09:27:59  0.00B 设置环境变量 JAVA_HOME
ENV JAVA_HOME=/opt/java/openjdk
                        
# 2026-08-01 04:37:23  0.00B 
/bin/sh -c #(nop)  CMD ["/bin/bash"]
                        
# 2026-08-01 04:37:22  78.16MB 
/bin/sh -c #(nop) ADD file:d938ff3d4eee15d8600de84bf85eac6ecd0f20bc92dfe305dafbff0bdc974c0f in / 
                        
# 2026-08-01 04:37:20  0.00B 
/bin/sh -c #(nop)  LABEL org.opencontainers.image.version=24.04
                        
# 2026-08-01 04:37:20  0.00B 
/bin/sh -c #(nop)  ARG LAUNCHPAD_BUILD_ARCH
                        
# 2026-08-01 04:37:20  0.00B 
/bin/sh -c #(nop)  ARG RELEASE
                        
                    

镜像信息

{
    "Id": "sha256:f1fc6bcdc771b2c9ba20fd3c8cbf112ec8839a719b8400dd053d9d6d3265ec97",
    "RepoTags": [
        "webgoat/webgoat:2026",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/webgoat/webgoat:2026"
    ],
    "RepoDigests": [
        "webgoat/webgoat@sha256:4ac84fd2269ea22393c9d79457068fef7db5a86da8699ff4f4552bc27541ddcd",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/webgoat/webgoat@sha256:0a3f81625b6cdd99705200865e185823644f66e834054842a2daf3b9a63125ee"
    ],
    "Parent": "",
    "Comment": "",
    "Created": "2026-08-09T11:53:01.062158541Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "",
    "Config": {
        "Hostname": "",
        "Domainname": "",
        "User": "webgoat",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "ExposedPorts": {
            "8080/tcp": {},
            "9090/tcp": {}
        },
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "PATH=/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
            "JAVA_HOME=/opt/java/openjdk",
            "LANG=en_US.UTF-8",
            "LANGUAGE=en_US:en",
            "LC_ALL=en_US.UTF-8",
            "JAVA_VERSION=jdk-25.0.3+9",
            "TZ=Europe/Amsterdam"
        ],
        "Cmd": null,
        "Image": "",
        "Volumes": null,
        "WorkingDir": "/home/webgoat",
        "Entrypoint": [
            "java",
            "-Duser.home=/home/webgoat",
            "-Dfile.encoding=UTF-8",
            "--add-opens",
            "java.base/java.lang=ALL-UNNAMED",
            "--add-opens",
            "java.base/java.util=ALL-UNNAMED",
            "--add-opens",
            "java.base/java.lang.reflect=ALL-UNNAMED",
            "--add-opens",
            "java.base/java.text=ALL-UNNAMED",
            "--add-opens",
            "java.desktop/java.beans=ALL-UNNAMED",
            "--add-opens",
            "java.desktop/java.awt.font=ALL-UNNAMED",
            "--add-opens",
            "java.base/sun.nio.ch=ALL-UNNAMED",
            "--add-opens",
            "java.base/java.io=ALL-UNNAMED",
            "--add-opens",
            "java.base/java.util=ALL-UNNAMED",
            "--add-opens",
            "java.base/sun.nio.ch=ALL-UNNAMED",
            "--add-opens",
            "java.base/java.io=ALL-UNNAMED",
            "-Drunning.in.docker=true",
            "-jar",
            "webgoat.jar",
            "--server.address",
            "0.0.0.0"
        ],
        "OnBuild": null,
        "Labels": {
            "io.buildah.version": "1.43.0",
            "maintainer": "WebGoat team",
            "name": "WebGoat: A deliberately insecure Web Application",
            "org.opencontainers.image.version": "24.04"
        }
    },
    "Architecture": "amd64",
    "Os": "linux",
    "Size": 560270140,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/035e95393e0f5bb85089f81bfbe0bbc5b43462d8c82eba3ec973160d9b197e57/diff:/var/lib/docker/overlay2/455225e6e7ad5194275439fc436465e084aacdebe9c7fe2970074690164df0ae/diff:/var/lib/docker/overlay2/51cf5c1b5d408704d27a72fa2328dfc36002373ef7fdd56bb04d8815c2e42004/diff:/var/lib/docker/overlay2/1b69b4d9d7b01f92a26a87b77c0dfefedc53d1935569d9798a32f684c71f418a/diff:/var/lib/docker/overlay2/23fc98bf394ec036dd2e479938ba695638d125ea829c2f801af3e14409fce2c5/diff:/var/lib/docker/overlay2/f9417e2f435431936ebbb112357fe78f3c9240e7d2cf65dd8d1f401512d2446e/diff",
            "MergedDir": "/var/lib/docker/overlay2/4c68c682755df0f2b32858f8e0b6305ec7558028829e80ae04a7acfb7fe2c157/merged",
            "UpperDir": "/var/lib/docker/overlay2/4c68c682755df0f2b32858f8e0b6305ec7558028829e80ae04a7acfb7fe2c157/diff",
            "WorkDir": "/var/lib/docker/overlay2/4c68c682755df0f2b32858f8e0b6305ec7558028829e80ae04a7acfb7fe2c157/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91",
            "sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7",
            "sha256:a8ed724289d98aae078054a61f2fb400e0e9a6345bddef7369529754f0069e1a",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
            "sha256:af451ab8a4332817ff1f1b36ea704715651b3e3c505a81808d906005facd7dbf",
            "sha256:6c6b04d8013d78acd90c44482446fda75dc7a41ee2790cff37e113b84aeefca1",
            "sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2"
        ]
    },
    "Metadata": {
        "LastTagTime": "2026-09-03T15:20:21.44322738+08:00"
    }
}

更多版本

docker.io/webgoat/webgoat:v2025.3

linux/amd64 docker.io600.68MB2025-09-15 17:09
523

docker.io/webgoat/webgoat:2026

linux/amd64 docker.io560.27MB2026-09-03 15:20
9
检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×