ℹ️
注意:这是一个 latest 标签镜像

latest 并不代表最新版本,本站同步时间存在延迟,无法保证此镜像与上游最新版本一致
生产环境建议使用明确的版本号(如 v1.2.3),避免因版本不一致导致问题。 了解更多 →

logo
docker.io/webgoat/webgoat:latest
linux/arm64 docker.io 请确认架构匹配

这是一个OWASP WebGoat的Docker镜像。WebGoat是一个免费的、开放源码的Web应用程序,旨在帮助安全专业人员和开发人员学习常见的Web应用程序安全漏洞。

通过这个镜像,用户可以在一个隔离的环境中安全地运行WebGoat,练习识别和防范诸如SQL注入、跨站点脚本(XSS)、跨站点请求伪造(CSRF)等漏洞。

它提供了一个方便易用的方式来学习和实践Web安全知识,无需在本地系统上进行复杂的配置。

18
浏览次数
582.84MB
镜像大小
国内镜像
swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/webgoat/webgoat:latest-linuxarm64
源镜像
docker.io/webgoat/webgoat:latest
镜像ID
sha256:ab9911e1ef4072aed2852c98c225fb76711b75cb88c93036ab5cfb6bad4b3037
镜像 TAG
latest-linuxarm64
镜像大小
582.84MB
平台架构
linux/arm64
镜像源
docker.io
CMD
启动入口
java -Duser.home=/home/webgoat -Dfile.encoding=UTF-8 --add-opens java.base/java.lang=ALL-UNNAMED --add-opens java.base/java.util=ALL-UNNAMED --add-opens java.base/java.lang.reflect=ALL-UNNAMED --add-opens java.base/java.text=ALL-UNNAMED --add-opens java.desktop/java.beans=ALL-UNNAMED --add-opens java.desktop/java.awt.font=ALL-UNNAMED --add-opens java.base/sun.nio.ch=ALL-UNNAMED --add-opens java.base/java.io=ALL-UNNAMED --add-opens java.base/java.util=ALL-UNNAMED --add-opens java.base/sun.nio.ch=ALL-UNNAMED --add-opens java.base/java.io=ALL-UNNAMED -Drunning.in.docker=true -jar webgoat.jar --server.address=0.0.0.0
工作目录
/home/webgoat
OS/平台
linux/arm64
镜像创建
2026-09-17T21:52:27.369415173Z
同步时间
2026-09-20 18:04
浏览量
18 次
贡献者
🔌 开放端口 2
8080/tcp 9090/tcp
⚙️ 环境变量 7
KeyValue
PATH=/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin 0
JAVA_HOME=/opt/java/openjdk 1
LANG=en_US.UTF-8 2
LANGUAGE=en_US:en 3
LC_ALL=en_US.UTF-8 4
JAVA_VERSION=jdk-25.0.4+7 5
TZ=Europe/Amsterdam 6
🏷️ 镜像标签 3
KeyValue
WebGoat team maintainer
WebGoat: A deliberately insecure Web Application name
24.04 org.opencontainers.image.version
🛡️ 镜像安全扫描
ubuntu 24.04 Trivy 2026-09-20 18:04 查看完整报告
20
低危 LOW
102
中危 MEDIUM
22
高危 HIGH
4
严重 CRITICAL
受影响目标 (2)
docker.io/webgoat/webgoat:latest (ubuntu 24.04) ubuntu Java jar

Docker拉取命令

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/webgoat/webgoat:latest-linuxarm64
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/webgoat/webgoat:latest-linuxarm64  docker.io/webgoat/webgoat:latest

Containerd拉取命令

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/webgoat/webgoat:latest-linuxarm64
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/webgoat/webgoat:latest-linuxarm64  docker.io/webgoat/webgoat:latest

Shell快速替换命令

sed -i 's#webgoat/webgoat:latest#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/webgoat/webgoat:latest-linuxarm64#' deployment.yaml

Ansible快速分发-Docker

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/webgoat/webgoat:latest-linuxarm64 && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/webgoat/webgoat:latest-linuxarm64  docker.io/webgoat/webgoat:latest'

Ansible快速分发-Containerd

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/webgoat/webgoat:latest-linuxarm64 && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/webgoat/webgoat:latest-linuxarm64  docker.io/webgoat/webgoat:latest'

镜像构建历史


# 2026-09-18 05:52:27  0.00B 指定检查容器健康状态的命令
HEALTHCHECK {Test:[CMD-SHELL curl --fail http://localhost:8080/WebGoat/actuator/health || exit 1] Interval:5s Timeout:3s StartPeriod:0s StartInterval:0s Retries:0}
                        
# 2026-09-18 05:52:27  0.00B 配置容器启动时运行的命令
ENTRYPOINT ["java" "-Duser.home=/home/webgoat" "-Dfile.encoding=UTF-8" "--add-opens" "java.base/java.lang=ALL-UNNAMED" "--add-opens" "java.base/java.util=ALL-UNNAMED" "--add-opens" "java.base/java.lang.reflect=ALL-UNNAMED" "--add-opens" "java.base/java.text=ALL-UNNAMED" "--add-opens" "java.desktop/java.beans=ALL-UNNAMED" "--add-opens" "java.desktop/java.awt.font=ALL-UNNAMED" "--add-opens" "java.base/sun.nio.ch=ALL-UNNAMED" "--add-opens" "java.base/java.io=ALL-UNNAMED" "--add-opens" "java.base/java.util=ALL-UNNAMED" "--add-opens" "java.base/sun.nio.ch=ALL-UNNAMED" "--add-opens" "java.base/java.io=ALL-UNNAMED" "-Drunning.in.docker=true" "-jar" "webgoat.jar" "--server.address=0.0.0.0"]
                        
# 2026-09-18 05:52:27  0.00B 设置工作目录为/home/webgoat
WORKDIR /home/webgoat
                        
# 2026-09-18 05:52:27  0.00B 设置环境变量 TZ
ENV TZ=Europe/Amsterdam
                        
# 2026-09-18 05:52:27  0.00B 声明容器运行时监听的端口
EXPOSE [9090/tcp]
                        
# 2026-09-18 05:52:27  0.00B 声明容器运行时监听的端口
EXPOSE [8080/tcp]
                        
# 2026-09-18 05:52:27  160.52MB 复制新文件或目录到容器中
COPY --chown=webgoat target/webgoat-*.jar /home/webgoat/webgoat.jar # buildkit
                        
# 2026-09-18 05:52:26  0.00B 指定运行容器时使用的用户
USER webgoat
                        
# 2026-09-18 05:52:26  9.67KB 执行命令并创建新的镜像层
RUN /bin/sh -c useradd -ms /bin/bash webgoat &&   chgrp -R 0 /home/webgoat &&   chmod -R g=u /home/webgoat # buildkit
                        
# 2026-09-18 05:52:26  0.00B 添加元数据标签
LABEL maintainer=WebGoat team
                        
# 2026-09-18 05:52:26  0.00B 添加元数据标签
LABEL name=WebGoat: A deliberately insecure Web Application
                        
# 2026-09-16 11:17:58  0.00B 设置默认要执行的命令
CMD ["jshell"]
                        
# 2026-09-16 11:17:58  0.00B 配置容器启动时运行的命令
ENTRYPOINT ["/__cacert_entrypoint.sh"]
                        
# 2026-09-16 11:17:58  5.98KB 复制新文件或目录到容器中
COPY --chmod=755 entrypoint.sh /__cacert_entrypoint.sh # buildkit
                        
# 2026-09-16 11:17:58  0.00B 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux;     echo "Verifying install ...";     fileEncoding="$(echo 'System.out.println(System.getProperty("file.encoding"))' | jshell -s -)"; [ "$fileEncoding" = 'UTF-8' ]; rm -rf ~/.java;     echo "javac --version"; javac --version;     echo "java --version"; java --version;     echo "Complete." # buildkit
                        
# 2026-09-16 11:17:56  264.37MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux;     ARCH="$(dpkg --print-architecture)";     case "${ARCH}" in        amd64)          ESUM='e58fcdcd637b25c03ca84cbbcefc70d11efb8f4b4cbd05decc9f661769d77f94';          BINARY_URL='https://github.com/adoptium/temurin25-binaries/releases/download/jdk-25.0.4%2B7/OpenJDK25U-jdk_x64_linux_hotspot_25.0.4_7.tar.gz';          ;;        arm64)          ESUM='621f7196f0b682fb557da58bec89bd7dfe5419811fe1c0ba75c9cc8432f084c7';          BINARY_URL='https://github.com/adoptium/temurin25-binaries/releases/download/jdk-25.0.4%2B7/OpenJDK25U-jdk_aarch64_linux_hotspot_25.0.4_7.tar.gz';          ;;        ppc64el)          ESUM='6b49f8289c377d4fb79ef54b612d77f969648f6ff862152f73c0be897e7c1ef8';          BINARY_URL='https://github.com/adoptium/temurin25-binaries/releases/download/jdk-25.0.4%2B7/OpenJDK25U-jdk_ppc64le_linux_hotspot_25.0.4_7.tar.gz';          ;;        riscv64)          ESUM='c6a70ed1ebe5ff66614f71fa9070e26d5b21587f576a8cb4f818269f4f475191';          BINARY_URL='https://github.com/adoptium/temurin25-binaries/releases/download/jdk-25.0.4%2B7/OpenJDK25U-jdk_riscv64_linux_hotspot_25.0.4_7.tar.gz';          ;;        s390x)          ESUM='24f05bf8b13cbb2fd6bdcc02da837725309d7279b5edebafb6b0994dcda262b3';          BINARY_URL='https://github.com/adoptium/temurin25-binaries/releases/download/jdk-25.0.4%2B7/OpenJDK25U-jdk_s390x_linux_hotspot_25.0.4_7.tar.gz';          ;;        *)          echo "Unsupported arch: ${ARCH}";          exit 1;          ;;     esac;     savedAptMark="$(apt-mark showmanual)";     apt-get update;     apt-get install -y --no-install-recommends wget gnupg;     wget --progress=dot:giga -O /tmp/openjdk.tar.gz ${BINARY_URL};     wget --progress=dot:giga -O /tmp/openjdk.tar.gz.sig ${BINARY_URL}.sig;     export GNUPGHOME="$(mktemp -d)";     gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 3B04D753C9050D9A5D343F39843C48A565F8F04B;     gpg --batch --verify /tmp/openjdk.tar.gz.sig /tmp/openjdk.tar.gz;     rm -rf "${GNUPGHOME}" /tmp/openjdk.tar.gz.sig;     echo "${ESUM} */tmp/openjdk.tar.gz" | sha256sum -c -;     mkdir -p "$JAVA_HOME";     tar --extract         --file /tmp/openjdk.tar.gz         --directory "$JAVA_HOME"         --strip-components 1         --no-same-owner     ;     rm -f /tmp/openjdk.tar.gz ${JAVA_HOME}/lib/src.zip;     apt-mark auto '.*' > /dev/null;     apt-mark manual $savedAptMark > /dev/null;     apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false;     rm -rf /var/lib/apt/lists/*;     find "$JAVA_HOME/lib" -name '*.so' -exec dirname '{}' ';' | sort -u > /etc/ld.so.conf.d/docker-openjdk.conf;     ldconfig;     java -Xshare:dump; # buildkit
                        
# 2026-09-16 11:17:36  0.00B 设置环境变量 JAVA_VERSION
ENV JAVA_VERSION=jdk-25.0.4+7
                        
# 2026-09-16 11:17:36  57.13MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux;     apt-get update;     DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends         fontconfig         ca-certificates p11-kit         binutils         tzdata         locales     ;     echo "en_US.UTF-8 UTF-8" >> /etc/locale.gen;     locale-gen en_US.UTF-8;     rm -rf /var/lib/apt/lists/* # buildkit
                        
# 2026-09-16 11:17:36  0.00B 设置环境变量 LANG LANGUAGE LC_ALL
ENV LANG=en_US.UTF-8 LANGUAGE=en_US:en LC_ALL=en_US.UTF-8
                        
# 2026-09-16 11:17:36  0.00B 设置环境变量 PATH
ENV PATH=/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
                        
# 2026-09-16 11:17:36  0.00B 设置环境变量 JAVA_HOME
ENV JAVA_HOME=/opt/java/openjdk
                        
# 2026-09-11 19:53:37  0.00B 
/bin/sh -c #(nop)  CMD ["/bin/bash"]
                        
# 2026-09-11 19:53:37  100.80MB 
/bin/sh -c #(nop) ADD file:ff1ce8d2ee022926eb353ff9248358531fbe1661ef12d8784e68fbc52738ed34 in / 
                        
# 2026-09-11 19:53:33  0.00B 
/bin/sh -c #(nop)  LABEL org.opencontainers.image.version=24.04
                        
# 2026-09-11 19:53:33  0.00B 
/bin/sh -c #(nop)  ARG LAUNCHPAD_BUILD_ARCH
                        
# 2026-09-11 19:53:33  0.00B 
/bin/sh -c #(nop)  ARG RELEASE
                        
                    

镜像信息

{
    "Id": "sha256:ab9911e1ef4072aed2852c98c225fb76711b75cb88c93036ab5cfb6bad4b3037",
    "RepoTags": [
        "webgoat/webgoat:latest",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/webgoat/webgoat:latest-linuxarm64"
    ],
    "RepoDigests": [
        "webgoat/webgoat@sha256:d4ac9fc2b0a41b68d64dedde684f4783aa60cc785838435a6d5bd5a25b387497",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/webgoat/webgoat@sha256:48316ea3b06c4c8f2f0c52eab1ae1a40772076932996210d5b70c86cfee3b850"
    ],
    "Parent": "",
    "Comment": "buildkit.dockerfile.v0",
    "Created": "2026-09-17T21:52:27.369415173Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "",
    "Config": {
        "Hostname": "",
        "Domainname": "",
        "User": "webgoat",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "ExposedPorts": {
            "8080/tcp": {},
            "9090/tcp": {}
        },
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "PATH=/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
            "JAVA_HOME=/opt/java/openjdk",
            "LANG=en_US.UTF-8",
            "LANGUAGE=en_US:en",
            "LC_ALL=en_US.UTF-8",
            "JAVA_VERSION=jdk-25.0.4+7",
            "TZ=Europe/Amsterdam"
        ],
        "Cmd": null,
        "Healthcheck": {
            "Test": [
                "CMD-SHELL",
                "curl --fail http://localhost:8080/WebGoat/actuator/health || exit 1"
            ],
            "Interval": 5000000000,
            "Timeout": 3000000000
        },
        "Image": "",
        "Volumes": null,
        "WorkingDir": "/home/webgoat",
        "Entrypoint": [
            "java",
            "-Duser.home=/home/webgoat",
            "-Dfile.encoding=UTF-8",
            "--add-opens",
            "java.base/java.lang=ALL-UNNAMED",
            "--add-opens",
            "java.base/java.util=ALL-UNNAMED",
            "--add-opens",
            "java.base/java.lang.reflect=ALL-UNNAMED",
            "--add-opens",
            "java.base/java.text=ALL-UNNAMED",
            "--add-opens",
            "java.desktop/java.beans=ALL-UNNAMED",
            "--add-opens",
            "java.desktop/java.awt.font=ALL-UNNAMED",
            "--add-opens",
            "java.base/sun.nio.ch=ALL-UNNAMED",
            "--add-opens",
            "java.base/java.io=ALL-UNNAMED",
            "--add-opens",
            "java.base/java.util=ALL-UNNAMED",
            "--add-opens",
            "java.base/sun.nio.ch=ALL-UNNAMED",
            "--add-opens",
            "java.base/java.io=ALL-UNNAMED",
            "-Drunning.in.docker=true",
            "-jar",
            "webgoat.jar",
            "--server.address=0.0.0.0"
        ],
        "OnBuild": null,
        "Labels": {
            "maintainer": "WebGoat team",
            "name": "WebGoat: A deliberately insecure Web Application",
            "org.opencontainers.image.version": "24.04"
        }
    },
    "Architecture": "arm64",
    "Os": "linux",
    "Size": 582843735,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/c5397fd41337cedc70be78c8599e524ee99025ea18b7380012fe74b2a2ed62df/diff:/var/lib/docker/overlay2/d16c7a001305c45ac4e898613882518224d8f9a201e63efd827f590b5ba9276e/diff:/var/lib/docker/overlay2/6665252edd23cc22c022706ae6bfe899eeab840f9e03f0bf497c854ccacf894c/diff:/var/lib/docker/overlay2/b4d59e6354013b1d6a313e26be52c8ee9438c187c46a622e2b792e2f19542f08/diff:/var/lib/docker/overlay2/631bc9630eaba930edcf5119b9d8f94a3b6449fbb58da4dc2e7f9e161b193366/diff:/var/lib/docker/overlay2/d9dcfe399424e427937866a60a4d26543f4b5f63ada26f60d037015192c00b8f/diff:/var/lib/docker/overlay2/b23b89b6fcd2c3ec0d915fb6164cb8744105edffd604830b59a9432dc71f3a87/diff",
            "MergedDir": "/var/lib/docker/overlay2/176998cabc863907d8560bac6c7216f1d6ca105fb086a0daca505f30ebe2e8db/merged",
            "UpperDir": "/var/lib/docker/overlay2/176998cabc863907d8560bac6c7216f1d6ca105fb086a0daca505f30ebe2e8db/diff",
            "WorkDir": "/var/lib/docker/overlay2/176998cabc863907d8560bac6c7216f1d6ca105fb086a0daca505f30ebe2e8db/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:8edaba05454265cd17270d38ec146446c640d1d25637413c3da64a3eff296c36",
            "sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec",
            "sha256:8167b1ad5f58c2dbdab53ee482471946da838e9f54e144fbd20b337eaea743d4",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
            "sha256:474591d1c928f93c719544af7b1d872bdeef4f0824c604a537ce3f63bd2f0920",
            "sha256:c9336f9cba0e1d6328b242a688b5f411578549c648132dbee2c784fb4ecfbe27",
            "sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef"
        ]
    },
    "Metadata": {
        "LastTagTime": "2026-09-20T18:04:17.298908542+08:00"
    }
}

更多版本

docker.io/webgoat/webgoat:2026

linux/amd64 docker.io560.27MB2026-09-03 15:20
48

docker.io/webgoat/webgoat:latest

linux/arm64 docker.io582.84MB2026-09-20 18:04
17

docker.io/webgoat/webgoat:v2025.3

linux/amd64 docker.io600.68MB2025-09-15 17:09
540
检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×