• Copy the war file to the $CATALINA_HOME/webapps/ directory.

• Ensure that the application war file is extracted to your server’s apps directory:

  $ mkdir ./wlp/usr/servers/defaultServer/apps/spiracle
  $ cd ./wlp/usr/servers/defaultServer/apps/spiracle
  $ jar xvf /path/to/downloaded/spiracle.war

• Modify server.xml as follows:

  <?xml version="1.0" encoding="UTF-8"?>
  <server description="new server">
    <!-- Enable features -->
    <featureManager>
      <feature>jsp-2.2</feature>
      <feature>Servlet-3.0</feature> <!--(1)-->
    </featureManager>
  
    <webApplication contextRoot="spiracle" location="spiracle"/> <!--(2)-->
    <httpSession idLength="28" /> <!--(3)-->
  
    <httpEndpoint id="defaultHttpEndpoint"
                  host="*" <!--(4)-->
                  httpPort="9080"
                  httpsPort="9443"/>
  </server>

  1. Enable Servlet-3.0 as a feature

  2. Add a webApplication tag referencing Spiracle

  3. Change httpSession parameter length

  4. Add a host attribute

If you would like to run the SQL injection tests, the database should be populated as follows. Data files are available in the web applications spiracle/conf/ directory after the spiracle.war file has been deployed and exploded.

http://ip:port/spiracle/

$ mvn install -Dversion.webxml=30

$ mvn install -Dversion.webxml=25

$ mvn clean

./target/Spiracle.war

Copyright 2018 Waratek Ltd.

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.