Installing Invicti Shark for Java websites

This document is for:

Invicti Enterprise On-Demand, Invicti Enterprise On-Premises

Before deploying Invicti Shark, note the list of supported servers and frameworks.

Supported Servers and Frameworks
Java Runtime	For any Java Runtime environment that is implemented according to these specifications, the supported versions are: 8.x 11.x 17.x 21.x
Application Servers	Apache Tomcat: v8.5.x v9.x v10.0.x v10.1.x Jetty v10.0.x v11.0.x v12.0.x WildFly v26.1.1 Final Standalone JBoss EAP v7.4.x WebSphere Liberty 19.0.0.9+
Database Engines	MySQL PostgreSQL Microsoft SQL Server DB2 Oracle Sybase SQLite H2
Other Technologies	Axis Freemarker Velocity Hibernate J2EE - Servlet/JSP Struts 2 Spring Web, Spring Boot Spring Expression, Java Expression Language (EL) JAX-RS and Jersey JavaMail JPA java.beans SAX, DOM JNDI - LDAP

Invicti Shark Network Prerequisites

Invicti Shark makes use of the Invicti IAST Bridge. For more information, refer to Configuring Invicti IAST Bridge.

The Invicti Shark agent will need to be installed in your web application. The following section describes how to deploy Invicti Shark to a Java web application.

How to install the Java Invicti Shark agent

To install the Java Invicti Shark agent, you need to:

Download the Java Invicti Shark agent (Shark (IAST and SCA).jar) from the Invicti UI. The Java Invicti Shark download file includes the Invicti Shark Token, which, by default, is unique for each target website URL. Unless the Token has been changed to be the same for all target websites, you will need to download the Java Invicti Shark agent for each target website separately.

Save the downloaded Java Shark agent to a location on your web server.

Deploy the Java Shark agent into your web server. This process differs depending on the web server. There are many possible configurations for a Java web server. The guides linked below look at the more common web server configuration possibilities. Use one of the following links for more information on how to deploy Invicti Shark for Java on your web application: