NetSPI / MoneyX

MoneyX is an intentionally vulnerable JSP application used for training developers in application security concepts.

 ,-----.,--.                  ,--. ,---.   ,--.,------.  ,------.
'  .--./|  | ,---. ,--.,--. ,-|  || o   \  |  ||  .-.  \ |  .---'
|  |    |  || .-. ||  ||  |' .-. |`..'  |  |  ||  |  \  :|  `--, 
'  '--'\|  |' '-' ''  ''  '\ `-' | .'  /   |  ||  '--'  /|  `---.
 `-----'`--' `---'  `----'  `---'  `--'    `--'`-------' `------'
----------------------------------------------------------------- 

     __     ___     _                 
  _ _\ \   / (_)___(_)_   _ _ __ ___  
 | '_ \ \ / /| / __| | | | | '_ ` _ \ 
 | | | \ V / | \__ \ | |_| | | | | | |
 |_| |_|\_/  |_|___/_|\__,_|_| |_| |_|
---------------------------------------
https://nvisium.com

MoneyX - an intentionally vulnerable payment application

Quick Start (Cloud9)

• Run gradle --console plain build run - Watch for the following banner to print out from the gradle process

:run

  .   ____          _            __ _ _
 /\\ / ___'_ __ _ _(_)_ __  __ _ \ \ \ \
( ( )\___ | '_ | '_| | '_ \/ _` | \ \ \ \
 \\/  ___)| |_)| | | | | || (_| |  ) ) ) )
  '  |____| .__|_| |_|_| |_\__, | / / / /
 =========|_|==============|___/=/_/_/_/
 :: Spring Boot ::        (v1.2.4.RELEASE)

• Login as username user and password user123

Preview the app

1. Once started, a popup will appear in the terminal window with the URL.
2. Click the URL from the popup to open a new tab.
3. Login as username user and password user123

Relaunching the app

1. Ctrl+C to kill the process
2. gradle --console plain build run
3. Login as username user and password user123