bletvaska / dwa

Damn Vulnerable Web Application. Set of labs for web application security course in Java.

Damn Wulnerable Application

Installation

Tomcat Installation

1. Download and install Apache Tomcat

2. update content of element <tomcat-users> in file TOMCAT/conf/tomcat-users.xml with following elements:

   <role rolename="manager-gui"/>
   <role rolename="manager-script"/>
   <user name="admin" password="admin"  
       roles="manager-gui,manager-script" />

3. Test your installation:

   • start Tomcat with TOMCAT/bin/startup.sh
   • with your browser open URL http://localhost:8080
   • shutdown Tomcat with TOMCAT/bin/shutdown.sh

Maven Installation

1. Download and install Apache Maven

2. Test the environment with:

   mvn --version

Import project to IDE

DWA is Maven Project, so you can use any IDE, which is able to work with Maven. Anyway - the preffered IDE is IntelliJ IDEA.

1. Import project as Maven Project

2. Execute file Initialization.java from your IDE or from CLI:

Deploying Project to Tomcat Server

From IntelliJ IDEA

Manualy you can from Maven Projects (View > Tool Windows > Maven Projects) run Plugins > tomcat7 > tomcat7:redeploy

Or you can create configuration for deployment to running Tomcat Server:

1. Run > Edit Configurations...
2. Press Alt + Insert and from Add New Configuration menu select Maven
3. Name your configuration Maven Redeploy
4. In field Command Line type: clean package tomcat7:redeploy
5. Confirm by clicking on Add/Apply button

Or you can create configuration, which runs Tomcat and deploys application:

1. Run > Edit Configurations...
2. Press Alt + Insert and from Add New Configuration menu select Tomcat Server > Local
3. Name your configuration as DWA on Tomcat
4. Locate your Tomcat installation with button Configure...
5. In Deployment tab click + button and select Artifact
6. Select dwa:war
7. Back in Server tab select in On Update action option Redeploy
8. Select your favorite browser in Open browser part
9. Confirm your configuration

From CLI

mvn clean package tomcat7:redeploy