Error-Invalid Session – WebGoat 접속 에러

CODEDRAGON Security/SecureCoding

반응형

   

   

에러 메시지

   

Invalid Session

   

   

해결방법 1

JRE 업데이트 수행

or

   

해결방법 2

C:\SecureCoding\apache-tomcat-7.0.57\conf\tomcat-users.xml

아래 코드 추가

<tomcat-users>

<!--

NOTE: By default, no user is included in the "manager-gui" role required

to operate the "/manager/html" web application. If you wish to use this app,

you must define such a user - the username and password are arbitrary.

-->

<!--

NOTE: The sample user and role entries below are wrapped in a comment

and thus are ignored when reading this file. Do not forget to remove

<!.. ..> that surrounds them.

-->

<!--

<role rolename="tomcat"/>

<role rolename="role1"/>

<user username="tomcat" password="tomcat" roles="tomcat"/>

<user username="both" password="tomcat" roles="tomcat,role1"/>

<user username="role1" password="tomcat" roles="role1"/>

-->

<Role rolename = "webgoat_basic" />

<Role rolename = "webgoat_admin" />

<Role rolename = "webgoat_user" />

<Role rolename = "tomcat" />

<User password = "WebGoat" roles = "webgoat_admin" username = "WebGoat" />

<User password = "basic" roles = "webgoat_user, webgoat_basic" username = />

<User password = "tomcat" roles = "tomcat" username = "tomcat" />

<User password = "guest" roles = "webgoat_user" username = "guest" />

   

</tomcat-users>

or

   

   

해결방법 3

시스템 변수에 JRE/JDK경로 재설정

   

해결!!!