Java Vulnerable Lab – Learn to Hack and secure Java based Web Applications

✨ deeznutz

✨ Master ✨
Staff member
May 15, 2017
Warning: Don’t run this app in Your Main Machine or in an online server. Install it in Vitual Machine.

How to setup Java Vulnerable lab?

Method 1.Very Easiest Method : VirtualBox VM The Most easiest way to use Java Vulnerable is using the VirtualBox VM which has everything set up and ready to use.

1. Install the VirtualBox : Downloads – Oracle VM VirtualBox
2. Download the VM Image from here : Download Java Vulnerable Lab - Pentesting Lab from
3. Import the JavaVulnerable.ova into VirtualBox.
4. Change the Network Settings to Host-Only Network
5. Start the Machine and Log into the Machine( Credentials; username: root password: cspf)
6. Start Tomcat by entering "service tomcat start" in the Terminal
7. Start mysql by entering "service mysql start" in the Terminal
8. Find the IP Address of Machine
9. In your Browser, go to "http://[IP_ADDRESS_OF_VM]:8080/JavaVulnerableLab/install.jsp
10. Click the Install Button
11. Enjoy


Method 2.Easiest Method :
Standalone Web Application
In this mehtod, you will be running an executable “JAR” file which runs the application with an embedded Apache Tomcat.


1. Install JDK
2. Download Executable Jar from here: Download Java Vulnerable Lab - Pentesting Lab from
3. Double Click the JavaVulnerable.jar to run( if double click is not working, run this command "java -jar JavaVulnerable.jar" in your Terminal or CMD)
4. In your Browser, go to "http://localhost:8080/JavaVulnerableLab/install.jsp
5. Click the Install Button

Method 3.
Using War file:


1. Install Apache Tomcat server
2. Go to http://[tomcat_installed_ip]:8080/manager/ (make sure you have modified tomcat-users.xml file of the tomcat to allow the manager).
3. Download our WAR file from here:
4. Deploy the WAR in Apache Tomcat manager.
5. Go to http://[tomcat_installed_ip]:8080/JavaVulnerableLab/install.jsp
6. Click the Install Button
Top Bottom