The following article shows you how you can run a Java application in Wildfly and then use Invicti Shark (IAST) to run an interactive application security testing (IAST) scan for that application.
This document was tested on Windows 10 using Java SE Development Kit 8 Update 241 (64-bit) installed in the folder C:\Program Files\Java\jdk1.8.0_241.
You will also need to set your JAVA_HOME environment variable to the folder in question:
Prerequisites
Install JAVA
Install Eclipse IDE for Enterprise JAVA and Web Developers
Install Eclipse Extensions from “Web, XML, Java EE, and OSGI Enterprise Development”:
Eclipse Java EE Developer Tools
Eclipse Java Web Developer Tools
Eclipse Web Developer Tools
JST Server Adapters Extensions (Apache Tomcat)
Step 1: Preparing an example application using Eclipse IDE
Creating your application
Launch Eclipse IDE.
From the menu, go to File > New > Project.
On the New Project wizard, search for and select Dynamic Web Project.
Select Next.
On the Dynamic Web Project, do the following:
Set the Project name field to axexample-java
Set the Target runtime field to Apache Tomcat v8.5
Set the Dynamic web module version field to 3.1
Set the Configuration field to Default Configuration for Apache Tomcat v8.5
Select Next.
On the Java window, leave the default settings as they are.
Select Next.
On the Web Module step, enable Generate web.xml deployment descriptor.
Select Finish.
On the Open Associated Perspective? dialog, select No.
Expand the axexample-java project
Right-click on the src folder
Select New > Other.
Highlight Servlet.
Select Next.
On the Create Servlet window, do the following:
Set the Java package field to com.mytest.axexample.
Set the Class name field to axExampleJavaServlet.
Select Finish.
Edit the contents of the axExampleJavaServlet.java file to read as follows:
package com.mytest.axexample;
import java.io.IOException;
import java.io.PrintWriter;
import javax.servlet.ServletException;
import javax.servlet.annotation.WebServlet;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
/**
* Servlet implementation class HelloWorldServlet
*/
@WebServlet("/axExampleJavaServlet")
public class axExampleJavaServlet extends HttpServlet {
private static final long serialVersionUID = 1L;
/**
* @see HttpServlet#HttpServlet()
*/
public axExampleJavaServlet() {
super();
// TODO Auto-generated constructor stub
}
/**
* @see HttpServlet#doGet(HttpServletRequest request, HttpServletResponse response)
*/
protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
PrintWriter out = response.getWriter();
out.print("<html><body><h1>Test JAVA Site Example for Wildfly</h1><br>Welcome to the main page.<br></body></html>");
}
/**
* @see HttpServlet#doPost(HttpServletRequest request, HttpServletResponse response)
*/
protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
// TODO Auto-generated method stub
doGet(request, response);
}
}
Expand the axexample-java project, right-click on the axexample-java/src/main/webapp folder, and select New > File.
Set the filename to index.html and select Finish.
Edit the contents of the index.html file to read as follows:
<html>
<head>
<title>Test JAVA Site Example for Wildfly</title>
</head>
<body>
<h1>Test JAVA Site Example for Wildfly</h1><br/><br/>
<a href="axExampleJavaServlet">Click here to invoke servlet</a>
</body>
</html>
Make sure that the changes to both new files are saved.
Right-click on the axexample-java project, select Export…, search for the WAR file option and select it.
Select Next, then choose a destination for your exported WAR file.
Ensure that the filename for your export file is axexample-java.war
Select Finish.
Step 2: Preparing Invicti Shark for Java
We deploy the test application to the following URL: http://wildfly-backend-proto.invicti.site:8080/axexample-java/ (In a production environment, you need to change this to the hostname you will use for your deployment.)
Using a text editor, edit the contents of the %JBOSS_HOME%\standalone\configuration\standalone-invicti.xml file by adding the highlighted lines below immediately below the line <subsystem xmlns=”urn:jboss:domain:ee:6.0″>:
By using this website you agree with our use of cookies to improve its performance and enhance your experience. More information in our Privacy Policy.
