diff --git a/TestDocker/Tomcat/Dockerfile b/TestDocker/Tomcat/Dockerfile
new file mode 100644
index 0000000..075ec94
--- /dev/null
+++ b/TestDocker/Tomcat/Dockerfile
@@ -0,0 +1,17 @@
+FROM tomcat:9.0-jdk8
+
+# 删除默认应用
+RUN rm -rf /usr/local/tomcat/webapps/*
+
+# 复制tomcat-users.xml配置文件
+COPY tomcat-users.xml /usr/local/tomcat/conf/
+
+# 允许远程访问manager
+COPY context.xml /usr/local/tomcat/webapps.dist/manager/META-INF/
+COPY context.xml /usr/local/tomcat/webapps.dist/host-manager/META-INF/
+
+# 复制默认应用
+RUN cp -r /usr/local/tomcat/webapps.dist/* /usr/local/tomcat/webapps/
+
+EXPOSE 8080
+CMD ["catalina.sh", "run"]
\ No newline at end of file
diff --git a/TestDocker/Tomcat/README.txt b/TestDocker/Tomcat/README.txt
new file mode 100644
index 0000000..793ac4f
--- /dev/null
+++ b/TestDocker/Tomcat/README.txt
@@ -0,0 +1,2 @@
+docker build -t tomcat-weak .
+docker run -d --name tomcat-test -p 8080:8080 tomcat-weak
\ No newline at end of file
diff --git a/TestDocker/Tomcat/context.xml b/TestDocker/Tomcat/context.xml
new file mode 100644
index 0000000..0d6c02d
--- /dev/null
+++ b/TestDocker/Tomcat/context.xml
@@ -0,0 +1,5 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<Context antiResourceLocking="false" privileged="true" >
+    <Valve className="org.apache.catalina.valves.RemoteAddrValve"
+           allow=".*" />
+</Context>
\ No newline at end of file
diff --git a/TestDocker/Tomcat/tomcat-users.xml b/TestDocker/Tomcat/tomcat-users.xml
new file mode 100644
index 0000000..7f4aa6a
--- /dev/null
+++ b/TestDocker/Tomcat/tomcat-users.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<tomcat-users xmlns="http://tomcat.apache.org/xml"
+              xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+              xsi:schemaLocation="http://tomcat.apache.org/xml tomcat-users.xsd"
+              version="1.0">
+
+    <role rolename="manager-gui"/>
+    <role rolename="manager-script"/>
+    <role rolename="manager-jmx"/>
+    <role rolename="manager-status"/>
+    <role rolename="admin-gui"/>
+    <role rolename="admin-script"/>
+
+    <user username="admin" password="123456" roles="manager-gui,manager-script,manager-jmx,manager-status"/>
+    <user username="tomcat" password="tomcat" roles="manager-gui"/>
+    <user username="both" password="both" roles="manager-gui,admin-gui"/>
+    <user username="root" password="root123" roles="manager-gui,manager-script"/>
+
+</tomcat-users>
\ No newline at end of file