I made this project for my practical engineering studies,
This project is very good for training web penetration testing (OWASP TOP 10 Vulnerabilities).
The best way to install my vulnerable application is:
* check the download area if you don't want to work hard
- Install it on virtual machine using VMWARE or Virtual box. (I will upload my pack).
- Install java + tomcat + MySQL java connector.
- Install the database - for that you need to change the password in the Mysql.java(in WEB-INF/classes/com/hackme) file and then compile the files.
- Put all the files in the ROOT folder in the tomcat folder (/var/lib/tomcatVER).
- Download your favorite penetration testing tools.
- Compile the *.java(in WEB-INF/classes/com/hackme) files with: javac -cp *.java .I made this project for my practical engineering studies,
* You can also install this web application on Backtrack and all the
others.
For Backtrack you need to change the password in Mysql.java
(in WEB-INF/classes/com/hackme) to toor.