Portable WAPT Hacme Books Setup

In this post we will install Hacme Books on the same VM that all of the other Hacme Applications are installed on. Hacme Books is probably the second easiest of the Hacme series to install.

First download Hacme Books and the prerequeistes required for installation.

Hacme Books

Java Development Kit 

Once all software is downloaded, begin by installing the Java Development Kit (JDK). I am going to install a JDK that is a few versions behind, in this case Java 6 update 27 (which was randomly picked). Double click on the Java install executable. Accept the defaults and Java will install.

Next, extract Hacme Books and browse to the install file and double click. Accept the defaults and Hacme Books will be installed.

To test successful installation, click on Start, All Programs, Foundstone Free Tools, Hacme Books 2.0, Hacme Books Server START. In a web browser, browse to this URL:

http://localhost:8989/HacmeBooks/mainMenu.html

If you see the Hacme Books 2.0 web site you have successfully installed Hacme Books.

Next, to ensure that Hacme Books always starts copy the Hacme Books Server START script from above and place in the startup folder. Browse to:

C:\Program Files\Foundstone Free Tools\Hacme Books 2.0\tomcat\bin\

Right click startup.bat and create a short cut. Move this short cut to:

C:\Documents and Settings\All Users\Start Menu\Programs\Startup

Reboot the system and the Hacme Books should start automatically now.

The last step is to make Hacme Books accessible over the network. Browse to:

C:\Program Files\Foundstone Free Tools\Hacme Books 2.0\tomcat\conf

Open server.xml with a text editor. Go to the line that says:

Connector port="8989" address="127.0.0.1" maxThreads="150" minSpareThreads="25"

               maxSpareThreads="75" enableLookups="false" redirectPort="8443" acceptCount="100"

               debug="0" connectionTimeout="20000"

               disableUploadTimeout="true"

Change the address to “0.0.0.0”. Restart Hacme Books via the start menu. From your Samurai WTF browse to:

http://172.16.254.201:8989/HacmeBooks/mainMenu.html

Hacme Books is now accessible from the network and will start automatically. In the next post I will describe setting up Hacme Travel.

Portable WAPT Hacme Shipping Setup

In the previous post Hacme Casino was installed, in this post Hacme Shipping will be setup. This post will assume you are using the same XP machine that have Hacme Bank and Hacme Casino installed.

To begin with Hacme Shipping and the following perquisites must be downloaded.

Hacme Shipping 

.Net Framework 4.0 

.Net Framework 2.0

MySQL 5.5.27  

Adobe ColdFusion MX Server 8.0 Developer Edition - 

While setting up Hacme Shipping, this blog post from pingtrip.com was very helpful.

With prerequisites downloaded, begin by installing .Net Framework 2.0 and double click on NetFX20SP2_x86. Let the framework install.

Next, browse to .Net Framework 4.0. and double click dontNetFx40_Full_setup.exe file to start the install .Net Framework. Accept the defaults and let .Net install, when the installation completes reboot the system.

Now browse to the MySQL download and double click on the MySQL installer. Select the defaults, when choosing a setup type, select custom. Under applications uncheck, MySQL for Excel 1.0.7. Under MySQL connections ONLY check Connector/NET 6.5.4 then continue the install. MySQL will install MS Visual C++ 2010, accept the defaults and continue the MySQL install. You will be asked for to enter a root password, I entered password (it’s a training application) by selecting the defaults.

Next, extract Hacme Shipping. After extraction double click on the Hacme Installer file. Select the defaults, when prompted for a the database setup enter in the MySQL root password set earlier. If asked for mysql.exe location browser to the following:

C:\Program Files\MySQL\MySQL Server 5.5\bin\mysql.exe

Click set location, and complete the install of Hacme Shipping.

To complete Hacme shipping we must install Cold Fusion. Browse to the Cold Fusion download and double click the exe (which will change based on the version used), in this case version 10. Select the defaults, when asked for a serial number, select developer edition. Set the admin password for remote start/stop administration, again I selected password, and continue selecting defaults. You will be askined for the administrator password, and I set it to password. Continue with defaults and install Cold Fusion.

When Cold Fusion installation is complete you will be taken to the Cold Fusion Admin page. Enter in the password set earlier. It will take several minutes for the initial configuration to complete. When it does click the Ok button.

Next, the Hacme Shipping database needs to be added. Login into the management interface and click on Data Sources. Enter in the following information:

            Data Source Name: hacmeshipping

            Driver: MySQL (4/5)

Click add. To configure the database connection enter in the following information:

            Database: hacmeshipping

            Server: 127.0.0.1

            Username: root

            Password: password

Click submit to configure the connection. With MySQL and Cold Fusion configure, click on the Hacme Shipping link to verify everything is working.

The Hacme XP system now has three vulnerable applications installed for web application testing. In the next blog post I will cover installing Hacme Books.