(BodgeitStore is a weak web application, which is now targeted at new penetration testers. When installing, you need to install J2sdk and tomcat first. You can find J2sdk resources online, and tomcat is uploaded by the way. After installation, put the decompressed bodgeit in the webapps directory file, and then point to your browser: localH/OST:8080/bodgeitBodgeit Including the following obvious vulnerabilities: Cross-site scripting SQL injection Hide content (but not maintained) Cross-site solicitation forgery debug code Unsafe target citation use program logic vulnerabilities This document includes the following attachments:
bodgeit.war
.....)