Damn Vulnerable Java Application

An intentionally vulnerable web application to demonstrate how security vulnerabilities in a Java web app can be exploited.

Quick Start

Install Docker and Docker Compose.

docker-compose up

Navigate to http://localhost:8080

To update image

docker-compose build

Requirements

• Java 1.7+
• Maven 3.x
• MySQL Server

Configuration

Database

Create MySQL database and credentials and configure the same in:

./src/main/webapp/WEB-INF/config.properties

Schema Import

Import the schema into MySQL database:

$ mysql -u USER -pPASSWORD dvja < ./db/schema.sql

Build

$ mvn clean package

The deployable war file is generated in targets directory.

Run with Jetty

$ mvn jetty:run

This will start the Jetty server on port 8080.

Deploy in Tomcat Server

• Build app
• Copy targets/dvja.war to Tomcat webapps directory
• To serve as root application, copy as ROOT.war to Tomcat webapps directory.