Running Insecure.Inc

Estimated duration: 10 minutes

Docker Image

Run the Docker container with

docker run -d --restart always -p 8080:8080 \
-e CHALLENGE_MASTER_SALT=$CHALLENGE_MASTER_SALT \
 securecodingdojo/insecure.inc

$CHALLENGE_MASTER_SALT - secret shared with the training portal

Browse to: http://localhost:8080/insecureinc

VM

Required OS - Linux
Tomcat 8
Install gcc for the C++ challenges

Insecure.Inc is a java application. There's a prebuilt WAR in the build directory that can be simply dropped in the /webapps folder of a Apache Tomcat 8 installation.

For instructions on how to install Tomcat you can check the following article: https://www.vultr.com/docs/how-to-install-apache-tomcat-8-on-centos-7

NOTE:

To prevent participants from bypassing challenges you may configure both the portal and Insecure.Inc to use a shared CHALLENGE_MASTER_SALT. Configure the challenge master salt in /opt/tomcat/bin/setenv.sh (or wherever you had tomcat installed) like so: export CHALLENGE_MASTER_SALT="our challenge master salt"