Skip to content

Commit 82a3db6

Browse files
breakthesecbreakthesec
committed
First commit
0 parents  commit 82a3db6

File tree

149 files changed

+6801
-0
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

149 files changed

+6801
-0
lines changed

‎build.xml

Lines changed: 71 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,71 @@
1+
<?xml version="1.0" encoding="UTF-8"?>
2+
<!-- You may freely edit this file. See commented blocks below for -->
3+
<!-- some examples of how to customize the build. -->
4+
<!-- (If you delete it and reopen the project it will be recreated.) -->
5+
<!-- By default, only the Clean and Build commands use this build script. -->
6+
<!-- Commands such as Run, Debug, and Test only use this build script if -->
7+
<!-- the Compile on Save feature is turned off for the project. -->
8+
<!-- You can turn off the Compile on Save (or Deploy on Save) setting -->
9+
<!-- in the project's Project Properties dialog box.-->
10+
<project name="JavaVulnerableLab" default="default" basedir=".">
11+
<description>Builds, tests, and runs the project JavaVulnerableLab.</description>
12+
<import file="nbproject/build-impl.xml"/>
13+
<!--
14+
15+
There exist several targets which are by default empty and which can be
16+
used for execution of your tasks. These targets are usually executed
17+
before and after some main targets. They are:
18+
19+
-pre-init: called before initialization of project properties
20+
-post-init: called after initialization of project properties
21+
-pre-compile: called before javac compilation
22+
-post-compile: called after javac compilation
23+
-pre-compile-single: called before javac compilation of single file
24+
-post-compile-single: called after javac compilation of single file
25+
-pre-compile-test: called before javac compilation of JUnit tests
26+
-post-compile-test: called after javac compilation of JUnit tests
27+
-pre-compile-test-single: called before javac compilation of single JUnit test
28+
-post-compile-test-single: called after javac compilation of single JUunit test
29+
-pre-dist: called before archive building
30+
-post-dist: called after archive building
31+
-post-clean: called after cleaning build products
32+
-pre-run-deploy: called before deploying
33+
-post-run-deploy: called after deploying
34+
35+
Example of pluging an obfuscator after the compilation could look like
36+
37+
<target name="-post-compile">
38+
<obfuscate>
39+
<fileset dir="${build.classes.dir}"/>
40+
</obfuscate>
41+
</target>
42+
43+
For list of available properties check the imported
44+
nbproject/build-impl.xml file.
45+
46+
47+
Other way how to customize the build is by overriding existing main targets.
48+
The target of interest are:
49+
50+
init-macrodef-javac: defines macro for javac compilation
51+
init-macrodef-junit: defines macro for junit execution
52+
init-macrodef-debug: defines macro for class debugging
53+
do-dist: archive building
54+
run: execution of project
55+
javadoc-build: javadoc generation
56+
57+
Example of overriding the target for project execution could look like
58+
59+
<target name="run" depends="<PROJNAME>-impl.jar">
60+
<exec dir="bin" executable="launcher.exe">
61+
<arg file="${dist.jar}"/>
62+
</exec>
63+
</target>
64+
65+
Notice that overridden target depends on jar target and not only on
66+
compile target as regular run target does. Again, for list of available
67+
properties which you can use check the target you are overriding in
68+
nbproject/build-impl.xml file.
69+
70+
-->
71+
</project>

‎build/web/ForgotPassword.jsp

Lines changed: 55 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,55 @@
1+
2+
<%@page import="model.DBConnect"%>
3+
<%@page import="java.sql.Statement"%>
4+
<%@page import="java.sql.ResultSet"%>
5+
<%@page import="java.sql.Connection"%>
6+
<%@ include file="header.jsp" %>
7+
<script src="jquery.min.js" type="text/javascript"></script>
8+
<script type="text/javascript">
9+
$(document).ready(function(){
10+
$("#username").change(function(){
11+
var username = $(this).val();
12+
$.getJSON("UsernameCheck.do","username="+username,function(result)
13+
{
14+
if(result.available==1)
15+
{
16+
$("#status").html("<b style='color:green'>&#10004;</b>");
17+
}
18+
else
19+
{
20+
$("#status").html("<b style='color:red'>&#10006; username doesn't exist</b>");
21+
}
22+
23+
});
24+
});
25+
});
26+
</script>
27+
28+
Password Recovery:
29+
<form action="ForgotPassword.jsp" method="post">
30+
<table>
31+
<tr><td>Username: </td><td><input type="text" name="username" id="username"/></td><td><span id="status"></span></td></tr>
32+
<tr><td>What's Your Pet's name?: </td><td><input type="text" name="secret" /></td></tr>
33+
<tr><td><input type="submit" name="GetPassword" value="GetPassword"/></td></tr>
34+
</table>
35+
</form><br/>
36+
37+
<%
38+
if(request.getParameter("secret")!=null)
39+
{
40+
Connection con=new DBConnect().connect(getServletContext().getRealPath("/WEB-INF/config.properties"));
41+
ResultSet rs=null;
42+
Statement stmt = con.createStatement();
43+
rs=stmt.executeQuery("select * from users where username='"+request.getParameter("username").trim()+"' and secret='"+request.getParameter("secret")+"'");
44+
if(rs != null && rs.next()){
45+
out.print("Hello "+rs.getString("username")+", <b class='success'> Your Password is: "+rs.getString("password"));
46+
}
47+
else
48+
{
49+
out.print("<b class='fail'> Secret/Email is wrong</b>");
50+
}
51+
}
52+
53+
%>
54+
55+
<%@ include file="footer.jsp" %>

‎build/web/META-INF/MANIFEST.MF

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
Manifest-Version: 1.0
2+

‎build/web/META-INF/context.xml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
<?xml version="1.0" encoding="UTF-8"?>
2+
<Context antiJARLocking="true" path="/JavaVulnerableLab" useHttpOnly="false"/>

‎build/web/Register.jsp

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
<%--
2+
Document : Register
3+
Created on : 2 Dec, 2014, 10:47:44 AM
4+
Author : breakthesec
5+
--%>
6+
<%@ include file="header.jsp" %>
7+
<script src="jquery.min.js" type="text/javascript"></script>
8+
<script type="text/javascript">
9+
$(document).ready(function(){
10+
$("#username").change(function(){
11+
var username = $(this).val();
12+
$.getJSON("UsernameCheck.do","username="+username,function(result)
13+
{
14+
if(result.available==0)
15+
{
16+
$("#status").html("<b style='color:green'>&#10004; Available</b>");
17+
}
18+
else
19+
{
20+
$("#status").html("<b style='color:red'>&#10006; Username is already taken</b>");
21+
}
22+
23+
});
24+
});
25+
$("#email").change(function(){
26+
var email = $(this).val();
27+
$.getJSON("EmailCheck.do","email="+email,function(result)
28+
{
29+
if(result.available==0)
30+
{
31+
$("#emailStatus").html("<b style='color:green'>&#10004;</b>");
32+
}
33+
else
34+
{
35+
$("#emailStatus").html("<b style='color:red'>&#10006; Email is already in Use</b>");
36+
}
37+
38+
});
39+
});
40+
});
41+
</script>
42+
<form action="AddUser" method="post">
43+
<table>
44+
<tr><td>UserName: </td><td><input type="text" name="username" id="username" /></td><td><span id="status"></span></td></tr>
45+
<tr><td>Email:</td><td><input type="text" name="email" id="email"/></td><td><span id="emailStatus"></span></td></tr>
46+
<tr><td>Describer Yourself:</td><td><input type="text" name="About" /></td></tr>
47+
<tr><td>What's Your Pet's name?:</td><td><input type="text" name="secret" /></td></tr>
48+
<tr><td>Password :</td><td><input type="password" name="password"/></td></tr>
49+
<tr><td><input type="submit" name="Register" value="Register"/></td></tr>
50+
</table>
51+
</form>
52+
<%@ include file="footer.jsp" %>

‎build/web/WEB-INF/AdminPanel.jsp

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
<%@ include file="/header.jsp" %>
2+
3+
This is Admin Panel located in WEB-INF. You can't directly visit this page ;)<br/><br/>
4+
<ul>
5+
<li><b><a href='<%=path%>/admin/manageusers.jsp'>Manage Users </a></b></li>
6+
</ul>
7+
<%@ include file="/footer.jsp" %>

‎build/web/WEB-INF/classes/controller/AddPage.class

2.82 KB
Binary file not shown.

‎build/web/WEB-INF/classes/controller/EmailCheck.class

2.91 KB
Binary file not shown.

‎build/web/WEB-INF/classes/controller/ForwardMe.class

2 KB
Binary file not shown.

‎build/web/WEB-INF/classes/controller/LoginValidator.class

3.35 KB
Binary file not shown.

0 commit comments

Comments
 (0)