Java

Java Spring

Java Spring is the most popular framework for building Java applications. It is widely used across the tech and financial sector, including companies like Netflix, Square, VMWare, and hundreds more.

Java Spring Vulny

• Description: This is an example Java Spring Boot web application that is vulnerable by design.
• Source Code: github.com/vulnerable-apps/javaspringvulny
• Credentials:
  • Username: user
  • Password: password

Shell

git clone https://github.com/vulnerable-apps/javaspringvulny.git
cd javaspringvulny

# Start the application
docker-compose up -d; sleep 10

# Record authentication - click on Form Auth
# Username: user
# Password: password
URL="https://localhost:9000"
APP="javaspringvulny-api"
nightvision target create $APP $URL --type api
nightvision auth playwright create $APP $URL

# extract the swagger
nightvision swagger extract . -t ${APP} --lang java

# Run the scan
nightvision scan ${APP} --auth ${APP}