Build Procedures
git-svn-id: http://webgoat.googlecode.com/svn/trunk@42 4033779f-a91e-0410-96ef-6bf7bf53c507
This commit is contained in:
mayhew64
parent
67497f0919
commit
159f691b4b
320
webgoat/main/build.xml
Normal file
320
webgoat/main/build.xml
Normal file
@ -0,0 +1,320 @@
|
|||||||
|
<!-- A "project" describes a set of targets that may be requested
|
||||||
|
when Ant is executed. The "default" attribute defines the
|
||||||
|
target which is executed if no specific target is requested,
|
||||||
|
and the "basedir" attribute defines the current working directory
|
||||||
|
from which Ant executes the requested task. This is normally
|
||||||
|
set to the current working directory.
|
||||||
|
-->
|
||||||
|
|
||||||
|
<project name="WebGoatClass-J2EE" default="Build_Lab_Env" basedir=".">
|
||||||
|
|
||||||
|
<!-- ===================== Property Definitions =========================== -->
|
||||||
|
|
||||||
|
<!--
|
||||||
|
Each of the following properties are used in the build script.
|
||||||
|
Values for these properties are set by the first place they are
|
||||||
|
defined, from the following list:
|
||||||
|
|
||||||
|
* Definitions on the "ant" command line (ant -Dfoo=bar compile).
|
||||||
|
* Definitions from a "build.properties" file in the top level
|
||||||
|
source directory of this application.
|
||||||
|
* Definitions from a "build.properties" file in the developer's
|
||||||
|
home directory.
|
||||||
|
* Default definitions in this build.xml file.
|
||||||
|
You will note below that property values can be composed based on the
|
||||||
|
contents of previously defined properties. This is a powerful technique
|
||||||
|
that helps you minimize the number of changes required when your development
|
||||||
|
environment is modified. Note that property composition is allowed within
|
||||||
|
"build.properties" files as well as in the "build.xml" script.
|
||||||
|
-->
|
||||||
|
|
||||||
|
<property file="build.properties"/>
|
||||||
|
<property file="${user.home}/build.properties"/>
|
||||||
|
|
||||||
|
<!-- ==================== File and Directory Names ======================== -->
|
||||||
|
|
||||||
|
<!--
|
||||||
|
These properties generally define file and directory names (or paths) that
|
||||||
|
affect where the build process stores its outputs.
|
||||||
|
|
||||||
|
build.home The directory into which the "prepare" and
|
||||||
|
"compile" targets will generate their output.
|
||||||
|
Defaults to "build".
|
||||||
|
|
||||||
|
catalina.home The directory in which you have installed
|
||||||
|
a binary distribution of Tomcat 4. This will
|
||||||
|
be used by the "deploy" target.
|
||||||
|
|
||||||
|
dist.home The name of the base directory in which
|
||||||
|
distribution files are created.
|
||||||
|
Defaults to "dist".
|
||||||
|
|
||||||
|
install.home The absolute path of the directory into which
|
||||||
|
the installer will copy its files. The Eclipse
|
||||||
|
project is bound to this path.
|
||||||
|
-->
|
||||||
|
|
||||||
|
<property name="app.home" value="${basedir}/project"/>
|
||||||
|
<property name="app.name" value="WebGoat"/> <!-- MUST BE CONSISTENT WITH project/build.xml! -->
|
||||||
|
<property name="app.version" value="5.0"/> <!-- MUST BE CONSISTENT WITH project/build.xml! -->
|
||||||
|
<property name="catalina.home" value="${basedir}/tomcat"/>
|
||||||
|
<property name="dist.home" value="${app.home}/dist"/>
|
||||||
|
<property name="install.home" value="WebGoatClassCD"/>
|
||||||
|
|
||||||
|
<!-- ==================== Clean Target ==================================== -->
|
||||||
|
|
||||||
|
<!--
|
||||||
|
The "clean" target deletes any previous "build" and "dist" directory,
|
||||||
|
so that you can be ensured the application can be built from scratch.
|
||||||
|
-->
|
||||||
|
|
||||||
|
<target name="clean"
|
||||||
|
description="Delete old build and dist directories">
|
||||||
|
<delete file="${web_inf.home}/web.xml"/>
|
||||||
|
<delete dir="${dist.home}"/>
|
||||||
|
<delete dir="${catalina.home}/logs"/>
|
||||||
|
<delete dir="${catalina.home}/work/Catalina/localhost"/>
|
||||||
|
<delete dir="${catalina.home}/webapps/${app.name}"/>
|
||||||
|
<delete file="${catalina.home}/webapps/${app.name}.war"/>
|
||||||
|
<delete dir="${catalina.home}/server/webapps/${app.name}"/>
|
||||||
|
<mkdir dir="${dist.home}"/>
|
||||||
|
<mkdir dir="${catalina.home}/logs"/>
|
||||||
|
</target>
|
||||||
|
|
||||||
|
<target name="clean_all"
|
||||||
|
description="Delete old build, dist directories and zips">
|
||||||
|
<delete dir="${dist.home}"/>
|
||||||
|
<mkdir dir="${dist.home}"/>
|
||||||
|
</target>
|
||||||
|
|
||||||
|
<!-- ==================== Compile Target ===================================== -->
|
||||||
|
|
||||||
|
<target name="compile" depends="Compile-WebGoat-Windows"
|
||||||
|
description="Build all dependency applications">
|
||||||
|
</target>
|
||||||
|
|
||||||
|
<target name="Compile-WebGoat-Windows"
|
||||||
|
description="Build the WebGoat application">
|
||||||
|
<ant dir="${app.home}" target="BuildWindowsWar" inheritAll="false"/>
|
||||||
|
</target>
|
||||||
|
|
||||||
|
<target name="Compile-WebGoat-Unix"
|
||||||
|
description="Build the WebGoat application">
|
||||||
|
<ant dir="${app.home}" target="BuildUnixWar" inheritAll="false"/>
|
||||||
|
</target>
|
||||||
|
|
||||||
|
<target name="Compile-WebGoat-LAB"
|
||||||
|
description="Build the WebGoat application">
|
||||||
|
<ant dir="${app.home}" inheritAll="false">
|
||||||
|
<target name="-WebGoatPropertiesLAB"/>
|
||||||
|
<target name="BuildWindowsWar"/>
|
||||||
|
</ant>
|
||||||
|
</target>
|
||||||
|
|
||||||
|
<target name="Compile-WebGoat-Class"
|
||||||
|
description="Build the WebGoat application">
|
||||||
|
<ant dir="${app.home}" inheritAll="false">
|
||||||
|
<target name="-WebGoatPropertiesClass"/>
|
||||||
|
<target name="BuildWindowsWar"/>
|
||||||
|
</ant>
|
||||||
|
</target>
|
||||||
|
|
||||||
|
<target name="Compile-WebGoat-OWASP-Windows"
|
||||||
|
description="Build the WebGoat application">
|
||||||
|
<ant dir="${app.home}" inheritAll="false">
|
||||||
|
<target name="-WebGoatPropertiesOWASP"/>
|
||||||
|
<target name="BuildWindowsWar"/>
|
||||||
|
</ant>
|
||||||
|
</target>
|
||||||
|
|
||||||
|
<!-- ==================== Dist Target ===================================== -->
|
||||||
|
|
||||||
|
<!--
|
||||||
|
The "dist" target creates a binary distribution of your application
|
||||||
|
in a directory structure ready to be archived in a tar.gz or zip file.
|
||||||
|
Note that this target depends on two others:
|
||||||
|
|
||||||
|
* "compile" so that the entire web application (including external
|
||||||
|
dependencies) will have been assembled
|
||||||
|
-->
|
||||||
|
|
||||||
|
|
||||||
|
<target name="dist_CBT" depends="clean, compile"
|
||||||
|
description="Create CBT binary distribution">
|
||||||
|
<CopyWebCBTToBuild/>
|
||||||
|
<WarBuild/>
|
||||||
|
</target>
|
||||||
|
|
||||||
|
<target name="ZipProject"
|
||||||
|
description="Create a zip archive of all Eclipse project files from C:\WebGoatClassCD">
|
||||||
|
|
||||||
|
<!-- Put a copy of the keystore into the WTP dynamic deployment area -->
|
||||||
|
<copy file="/WebGoatClassCD/tomcat/.keystore" tofile="/WebGoatClassCD/workspace/.metadata/.plugins/org.eclipse.wst.server.core/tmp0/.keystore"/>
|
||||||
|
|
||||||
|
<zip destfile="${basedir}/project-student.zip"
|
||||||
|
basedir="/WebGoatClassCD"
|
||||||
|
includes="project/.project, project/.classpath, project/.settings/**, workspace/**"/>
|
||||||
|
</target>
|
||||||
|
|
||||||
|
|
||||||
|
<target name="DeployWar"
|
||||||
|
description="Copy existing war to Tomcat - Does not rebuild">
|
||||||
|
|
||||||
|
<!-- Install war to Tomcat -->
|
||||||
|
<delete dir="${catalina.home}/webapps/${app.name}"/>
|
||||||
|
<delete file="${catalina.home}/webapps/${app.name}.war"/>
|
||||||
|
<copy file="${app.home}/dist/${app.name}-${app.version}.war" tofile="${catalina.home}/webapps/${app.name}.war"/>
|
||||||
|
|
||||||
|
</target>
|
||||||
|
|
||||||
|
<!-- =================== Prepare Distributions ========================== -->
|
||||||
|
|
||||||
|
<!-- Build unix Release -->
|
||||||
|
<target name="BuildUnixWar_release" depends="Compile-WebGoat-Unix"
|
||||||
|
description="Builds Unix release for OWASP">
|
||||||
|
<delete dir="${dist.home}/temp" includeemptydirs="true"/>
|
||||||
|
<unzip src="${dist.home}/${app.name}-${app.version}.war" dest="${dist.home}/temp"/>
|
||||||
|
<delete file="${dist.home}/temp/WEB-INF/webgoat-class.properties"/>
|
||||||
|
<delete file="${dist.home}/temp/WEB-INF/webgoat-lab.properties"/>
|
||||||
|
<delete file="${dist.home}/temp/WEB-INF/web-windows.xml"/>
|
||||||
|
<move file="${dist.home}/temp/WEB-INF/web-unix.xml" tofile="${dist.home}/temp/WEB-INF/web.xml"/>
|
||||||
|
<move file="${dist.home}/temp/WEB-INF/webgoat-owasp.properties" tofile="${dist.home}/temp/WEB-INF/webgoat.properties"/>
|
||||||
|
<delete file="${dist.home}/${app.name}-${app.version}.war"/>
|
||||||
|
<zip destfile="${dist.home}/${app.name}-${app.version}.war" basedir="${dist.home}/temp"/>
|
||||||
|
|
||||||
|
<!-- 1) A copy of the WAR file with WAR file instructions-->
|
||||||
|
<copy file="${basedir}/WAR Installation Instructions.txt" todir="${dist.home}"/>
|
||||||
|
<zip destfile="${dist.home}/Unix_${app.name}-${app.version}-Standalone.war.zip"
|
||||||
|
basedir="${dist.home}"
|
||||||
|
includes="WebGoat-*.war, WAR*.txt"/>
|
||||||
|
<delete file="${dist.home}/WAR Installation Instructions.txt"/>
|
||||||
|
<delete dir="${dist.home}/temp" includeemptydirs="true"/>
|
||||||
|
|
||||||
|
<!-- 2) The normal WAR file -->
|
||||||
|
<copy file="${dist.home}/${app.name}-${app.version}.war" tofile="${catalina.home}/webapps/${app.name}.war"/>
|
||||||
|
<zip destfile="${dist.home}/Unix_${app.name}-${app.version}_Release.zip"
|
||||||
|
basedir=""
|
||||||
|
includes="doc/, tomcat/, webgoat.sh, readme.txt"/>
|
||||||
|
<move file="${dist.home}/${app.name}-${app.version}.war" tofile="${dist.home}/Unix_${app.name}-${app.version}.war"/>
|
||||||
|
<delete file="${catalina.home}/webapps/${app.name}.war"/>
|
||||||
|
</target>
|
||||||
|
|
||||||
|
<!-- Build windows release -->
|
||||||
|
<target name="BuildWindowsWar_release" depends="Compile-WebGoat-Windows"
|
||||||
|
description="Builds Windows release for OWASP">
|
||||||
|
|
||||||
|
<delete dir="${dist.home}/temp" includeemptydirs="true"/>
|
||||||
|
<unzip src="${dist.home}/${app.name}-${app.version}.war" dest="${dist.home}/temp"/>
|
||||||
|
<delete file="${dist.home}/temp/WEB-INF/webgoat-class.properties"/>
|
||||||
|
<delete file="${dist.home}/temp/WEB-INF/webgoat-lab.properties"/>
|
||||||
|
<delete file="${dist.home}/temp/WEB-INF/web-unix.xml"/>
|
||||||
|
<move file="${dist.home}/temp/WEB-INF/web-windows.xml" tofile="${dist.home}/temp/WEB-INF/web.xml"/>
|
||||||
|
<move file="${dist.home}/temp/WEB-INF/webgoat-owasp.properties" tofile="${dist.home}/temp/WEB-INF/webgoat.properties"/>
|
||||||
|
<delete file="${dist.home}/${app.name}-${app.version}.war"/>
|
||||||
|
<zip destfile="${dist.home}/${app.name}-${app.version}.war"
|
||||||
|
basedir="${dist.home}/temp"
|
||||||
|
excludes="JavaSource/org/owasp/webgoat/lessons/instructor/"/>
|
||||||
|
|
||||||
|
<!-- 1) A copy of the WAR file with WAR file instructions-->
|
||||||
|
<copy file="${basedir}/WAR Installation Instructions.txt" todir="${dist.home}"/>
|
||||||
|
<zip destfile="${dist.home}/Windows_${app.name}-${app.version}-Standalone.war.zip"
|
||||||
|
basedir="${dist.home}"
|
||||||
|
includes="WebGoat-*.war, WAR*.txt"/>
|
||||||
|
<delete file="${dist.home}/WAR Installation Instructions.txt"/>
|
||||||
|
<delete dir="${dist.home}/temp" includeemptydirs="true"/>
|
||||||
|
|
||||||
|
<!-- 2) The normal WAR file -->
|
||||||
|
<copy file="${dist.home}/${app.name}-${app.version}.war" tofile="${catalina.home}/webapps/${app.name}.war"/>
|
||||||
|
<zip destfile="${dist.home}/Windows_${app.name}-${app.version}_Release.zip"
|
||||||
|
basedir=""
|
||||||
|
includes="doc/, java/, tomcat/, webgoat.bat, readme.txt"/>
|
||||||
|
<move file="${dist.home}/${app.name}-${app.version}.war" tofile="${dist.home}/Windows_${app.name}-${app.version}.war"/>
|
||||||
|
<delete file="${catalina.home}/webapps/${app.name}.war"/>
|
||||||
|
</target>
|
||||||
|
|
||||||
|
<!--Build developer release -->
|
||||||
|
<target name="BuildDev_release" depends="clean"
|
||||||
|
description="Creates developer binary distribution for OWASP">
|
||||||
|
<delete dir="${dist.home}/temp" includeemptydirs="true"/>
|
||||||
|
<zip destfile="${dist.home}/${app.name}-${app.version}_developer.zip"
|
||||||
|
basedir=""
|
||||||
|
includes="java/, eclipse/, tomcat/, project/JavaSource/, project/WebContent/, project/build.xml, project/doc, webgoat.bat, webgoat.sh, eclipse.bat, readme.txt, HOW*"
|
||||||
|
excludes="project/JavaSource/org/owasp/webgoat/lessons/instructor/, project/.*, project/WebContent/WEB-INF/webgoat-lab.properties, project/WebContent/WEB-INF/webgoat-class.properties, project/build/WEB-INF/webgoat-lab.properties, project/build/WEB-INF/webgoat-class.properties"/>
|
||||||
|
<unzip src="${dist.home}/${app.name}-${app.version}_developer.zip" dest="${dist.home}/temp"/>
|
||||||
|
<move file="${dist.home}/temp/project/WebContent/WEB-INF/webgoat-owasp.properties" tofile="${dist.home}/temp/project/WebContent/WEB-INF/webgoat.properties"/>
|
||||||
|
<delete file="${dist.home}/${app.name}-${app.version}_developer.zip"/>
|
||||||
|
<zip destfile="${dist.home}/${app.name}-${app.version}_developer.zip"
|
||||||
|
basedir="${dist.home}/temp"/>
|
||||||
|
<delete dir="${dist.home}/temp" includeemptydirs="true"/>
|
||||||
|
</target>
|
||||||
|
|
||||||
|
<!--Build patch release -->
|
||||||
|
<target name="BuildPatch_release" depends="clean, compile"
|
||||||
|
description="Creates patch release of class files for WebGoat">
|
||||||
|
<zip destfile="${dist.home}/${app.name}-${app.version}_patch.zip">
|
||||||
|
<zipfileset dir="build/WEB-INF/classes" prefix="WEB-INF/classes"/>
|
||||||
|
<zipfileset dir="." includes="readme_patch.txt"/>
|
||||||
|
</zip>
|
||||||
|
</target>
|
||||||
|
|
||||||
|
<!-- Build J2EE Lab Environment release -->
|
||||||
|
<target name="Build_Lab_Env" depends="clean"
|
||||||
|
description="Builds J2EE Course release">
|
||||||
|
|
||||||
|
<!-- Build the WebGoat WAR with the desired properties file -->
|
||||||
|
<ant dir="${app.home}" inheritAll="false">
|
||||||
|
<target name="WebGoatPropertiesLAB"/>
|
||||||
|
<target name="BuildWindowsWar"/>
|
||||||
|
</ant>
|
||||||
|
|
||||||
|
<antcall target="DeployWar"> </antcall>
|
||||||
|
|
||||||
|
<!-- Build the CD image -->
|
||||||
|
<zip destfile="${dist.home}/${ant.project.name}.zip">
|
||||||
|
<zipfileset dir="." prefix="${install.home}"
|
||||||
|
includes="eclipse/, java/, project/, tomcat/, webscarab/, InfoZip/, eclipse.bat, webgoat.bat, webscarab.bat"
|
||||||
|
excludes="project/.*, project/.settings/**, project/dist/**, project/bin/**, project/build/**, project/web_CBT/**"/>
|
||||||
|
<zipfileset src="project-student.zip" prefix="${install.home}"/>
|
||||||
|
</zip>
|
||||||
|
<copy todir="${dist.home}">
|
||||||
|
<fileset dir="." includes="install.bat, uninstall.bat InfoZip/"/>
|
||||||
|
<fileset dir="doc" includes="install.doc, readme.doc"/>
|
||||||
|
<fileset dir="doc">
|
||||||
|
<include name="J2EE Labs Slides.ppt"/>
|
||||||
|
</fileset>
|
||||||
|
</copy>
|
||||||
|
|
||||||
|
|
||||||
|
</target>
|
||||||
|
|
||||||
|
<!--Build all release -->
|
||||||
|
<target name="Build_OWASP_Course" depends="clean_all, BuildDev_release, BuildUnixWar_release, BuildWindowsWar_release"
|
||||||
|
description="Creates all binary distributions for OWASP">
|
||||||
|
<copy file="${basedir}/readme.txt" tofile="${dist.home}/readme.txt"/>
|
||||||
|
</target>
|
||||||
|
|
||||||
|
<!-- ==================== Prepare Target ================================== -->
|
||||||
|
|
||||||
|
<!--
|
||||||
|
The "prepare" target is used to create the "build" destination directory,
|
||||||
|
and copy the static contents of your web application to it. If you need
|
||||||
|
to copy static files from external dependencies, you can customize the
|
||||||
|
contents of this task.
|
||||||
|
|
||||||
|
Normally, this task is executed indirectly when needed.
|
||||||
|
-->
|
||||||
|
|
||||||
|
<target name="prepare">
|
||||||
|
</target>
|
||||||
|
|
||||||
|
|
||||||
|
<target name="Start Tomcat"
|
||||||
|
description="start the Tomcat server">
|
||||||
|
<exec dir="${basedir}" executable="webgoat.bat" >
|
||||||
|
</exec>
|
||||||
|
</target>
|
||||||
|
|
||||||
|
|
||||||
|
</project>
|
||||||
|
|
||||||
|
|
||||||
@ -0,0 +1,55 @@
|
|||||||
|
category.General.ranking=11
|
||||||
|
lesson.HttpBasics.ranking=10
|
||||||
|
lesson.HttpSplitting.ranking=20
|
||||||
|
lesson.ThreadSafetyProblem.ranking=30
|
||||||
|
|
||||||
|
category.Broken\ Authentication\ and\ Session\ Management.ranking=21
|
||||||
|
lesson.BasicAuthentication.ranking=10
|
||||||
|
lesson.WeakAuthenticationCookie.ranking=20
|
||||||
|
|
||||||
|
category.Broken\ Access\ Control.ranking=31
|
||||||
|
lesson.AccessControlMatrix.ranking=10
|
||||||
|
lesson.PathBasedAccessControl.ranking=20
|
||||||
|
|
||||||
|
category.Cross-Site\ Scripting\ (XSS).ranking=41
|
||||||
|
lesson.StoredXss.ranking=10
|
||||||
|
lesson.ReflectedXSS.ranking=20
|
||||||
|
lesson.CSRF.ranking=30
|
||||||
|
|
||||||
|
category.Unvalidated\ Parameters.ranking=51
|
||||||
|
lesson.HiddenFieldTampering.ranking=10
|
||||||
|
lesson.JavaScriptValidation.ranking=20
|
||||||
|
lesson.UncheckedEmail.ranking=30
|
||||||
|
|
||||||
|
category.Insecure\ Storage.ranking=61
|
||||||
|
lesson.Encoding.ranking=10
|
||||||
|
|
||||||
|
category.Injection\ Flaws.ranking=71
|
||||||
|
lesson.SqlNumericInjection.ranking=10
|
||||||
|
lesson.SqlStringInjection.ranking=20
|
||||||
|
lesson.CommandInjection.ranking=30
|
||||||
|
lesson.LogSpoofing.ranking=40
|
||||||
|
|
||||||
|
category.Improper\ Error\ Handling.ranking=81
|
||||||
|
lesson.FailOpenAuthentication.ranking=10
|
||||||
|
|
||||||
|
category.Code\ Quality.ranking=91
|
||||||
|
lesson.HtmlClues.ranking=10
|
||||||
|
|
||||||
|
category.Web\ Services.category.ranking=101
|
||||||
|
lesson.SoapRequest.ranking=10
|
||||||
|
lesson.WSDLScanning.ranking=20
|
||||||
|
lesson.WsSqlInjection.ranking=30
|
||||||
|
|
||||||
|
category.New\ Lesson.category.ranking=111
|
||||||
|
lesson.HowToAddNewLesson.ranking=10
|
||||||
|
|
||||||
|
lesson.WeakSessionID.hidden=true
|
||||||
|
lesson.BufferOverflow.hidden=true
|
||||||
|
lesson.BlindSqlInjection.hidden=true
|
||||||
|
lesson.DOS_Login.hidden=true
|
||||||
|
lesson.ForcedBrowsing.hidden=true
|
||||||
|
lesson.ForgotPassword.hidden=true
|
||||||
|
lesson.ParameterInjection.hidden=true
|
||||||
|
lesson.RemoteAdminFlaw.hidden=true
|
||||||
|
lesson.ChallengeScreen.hidden=true
|
||||||
Loading…
x
Reference in New Issue
Block a user