Portable WAPT Hacme Casino Setup

In previous post we setup Hacme Bank for a portable web app pen testing lab. This post is going to focus on setting up Hacme Casino. Hacme Casino is written in Ruby on Rails and has several well known web application vulnerabilities.

This post assumes Hacme Casino will be set up on the same Windows XP SP3 system that was setup with Hacme Bank as described in this blog post.

Download Hacme Casino from the Foundstone website.

Hacme Casino has no other prerequisites, begin by browsing to were the application was downloaded to. Extract the contents, and then browse to the folder where the files were extracted. Double click on the HacmeCasinoSetup.exe. Select the defaults and finish.

The install for Hacme Casino is the simplest of the Hacme applications. To test start by clicking the Start button, All Programs, Foundstone Free Tools, Hacme Casino 1.0, Hacme Server START. This will start Hacme Casino.

Open up a web browser and enter in the following URL:

http://localhost:3000

If you see a login page, Hacme Casino is successfully installed. To verify remote access, if using the IP address’s described in earlier posts, enter in the URL:

http://172.16.254.201:3000

You should see the same page as before.

Unlike Hacme Bank, Hacme Casino will not automatically start. To ensure that Hacme Casino will start every time the system is rebooted the easiest way is to add the startup script to the Windows startup. Browse to C:\Program Files\Foundstone Free Tools\Hacme Casino v1.0. Create a shortcut for Hacme Casino, then copy into the c:\Document and Settings\All Users\Start Menu\Programs\Startup.  When the system is rebooted, Hacme Casino will automatically start.

With Hacme Casino and Hacme Bank setup, the next blog post will be about setting up Hacme Shipping.