[Owasp-webgoat] VMWare Image of Webgoat

[Bruce Mayhew]

I think this is a interesting idea.  One of the ant build tags creates a
"classroom" environment.  The image would be quite large, but I'd be
willing to put it on sourceforge (if it would allow it) if people think
it is a good idea.  The question I have is: Would you download a VM that
you didn't create and run it on your machine?  

Anyone have any thoughts on this?  I'm not that familiar with potential
risks of running an "untrusted" VM.

Bruce

-----Original Message-----
From: Brad Andrews [mailto:andrews at rbacomm.com] 
Sent: Wednesday, October 22, 2008 10:36 AM
To: webgoat at owasp.org
Subject: VMWare Image of Webgoat


Has anyone thought of creating a VMWare Player image of Webgoat (on  
some kind of Linux) to allow people to be able to run Webgoat without  
exposing themselves to external attack?  Networking could be setup to  
not connect to the host machine.

I thought of this the other day and it would be worth doing, though I  
am not very knowledgeable on configuring Linux VMWare images,  
unfortunately.

Brad