Skip to main content
This document is for:
Invicti Enterprise on-demand, Invicti Enterprise on-premises

Deploy Invicti Shark for .NET - AWS Elastic Beanstalk

This document shows you how you can run a .NET application in AWS Elastic Beanstalk and then use Invicti Shark (IAST) to run an interactive application security testing (IAST) scan for that application.

Step 1: Create your target in Invicti Enterprise​

For this example, assume that the URL for your target is http://eb.acunetixexample.com. Create a target with your URL, turn on Invicti Shark, download the Shark agent file Shark(IASTandSCA).zip, and save this file to use later on.

Step 2: Create your web application using Visual Studio​

  1. From the menu, choose File > New > Project.
  2. From the Create a new project window, search for "web application."
  3. Choose ASP.NET Web Application (.NET Framework), then Next.
  4. Enter a friendly name for your project. For this illustration, use axexample-dotnet.
  5. Choose Create.
Configure your new project in Visual Studio.
  1. From the Create a new ASP.NET Web Application window, choose Empty, clear Configure for HTTPS, then choose Create.
  2. Right-click the axexample-dotnet project name.
  3. Choose Add > HTML Page.
  4. On the Specify Name for Item dialog, enter index to the Item name field and choose OK.
  5. Edit your index.html file to read as follows:
<!DOCTYPE html>
<html>
<head>
    <meta charset="utf-8" />
    <title></title>
</head>
<body>
    <h1>Test dotNET Site Example for AWS Elastic Beanstalk</h1>
    <br>
    Hello World! - Main Page
    <br>
    <a href="/page1.html">Goto Page 1</a>
</body>
</html>
  1. Do the same to create a page1.html file; edit it to read as follows:
<!DOCTYPE html>
<html>
<head>
    <meta charset="utf-8" />
    <title></title>
</head>
<body>
    <h1>Test dotNET Site Example for AWS Elastic Beanstalk</h1>
    <br>
    Hello World! - Page 1
    <br>
    <a href="/">Goto Main Page</a>
</body>
</html>
  1. Save your changes to index.html and page1.html files.
  2. Right-click the axexample-dotnet project name and choose Publish.
  3. From the Publish window, choose Web Server (IIS), then Next.
Publish as Web Server (IIS).
  1. Choose Web Deploy Package.
  2. Choose Next.
  3. Now, set your Package location to C:\axexample-dotnet\axexample-dotnet.zip, set your site name to axexample-dotnet.
  4. Choose Finish. If necessary, create the C:\axexample-dotnet folder to hold your files.
  5. Choose Publish.
  6. Using Windows Explorer, navigate to the C:\axexample-dotnet folder and remove the following files:
    • axexample-dotnet.deploy.cmd
    • axexample-dotnet.deploy-readme.txt
    • axexample-dotnet.SourceManifest.xml
  7. At this stage, the C:\axexample-dotnet folder should contain the following two files:
    • axexample-dotnet.zip
    • axexample-dotnet.SetParameters.xml

Step 3: Complete your application source code bundle​

This simple web application is defined through the following file structure:

C:\axexample-dotnet\.ebextensions
C:\axexample-dotnet\.ebextensions\acesensor.config
C:\axexample-dotnet\aws-windows-deployment-manifest.json
C:\axexample-dotnet\axexample-dotnet.SetParameters.xml
C:\axexample-dotnet\axexample-dotnet.zip
C:\axexample-dotnet\Shark(IASTandSCA).zip
  1. Create a folder C:\axexample-dotnet\.ebextensions
  2. Create your C:\axexample-dotnet\.ebextensions\acesensor.config file to read as follows:
files:
  "C:\\Program Files\\Amazon\\ElasticBeanstalk\\hooks\\appdeploy\\post\\90create_folder.bat":
    content: mkdir C:\shark
  "C:\\Program Files\\Amazon\\ElasticBeanstalk\\hooks\\appdeploy\\post\\91extract_shark.bat":
    content: powershell Expand-Archive -force C:\staging-previous\Shark(IASTandSCA).zip -DestinationPath C:\shark
  "C:\\Program Files\\Amazon\\ElasticBeanstalk\\hooks\\appdeploy\\post\\92inject_shark.bat":
    content: "C:\shark\.NET Framework\injector.exe" -m inject -t http://localhost:80/
  1. Create your C:\axexample-dotnet\aws-windows-deployment-manifest.json file to read as follows:
{
  "manifestVersion": 1,
  "deployments": {
    "msDeploy": [
      {
        "name": "axexample-dotnet",
        "parameters": {
          "appBundle": "axexample-dotnet.zip",
          "iisPath": "/"
        }
      }
    ]
  }
}
  1. Copy the Shark(IASTandSCA).zip file you created earlier into C:\axexample-dotnet\Shark(IASTandSCA).zip
  2. Build the source code bundle from the command line with:
powershell Compress-Archive -Path C:\axexample-dotnet\* -DestinationPath %USERPROFILE%\Desktop\axexample-dotnet-aws.zip
  1. Retain your ZIP file for the deployment steps as specified in the following section.

Step 4: Deploy your web application to AWS Elastic Beanstalk​

  1. From your AWS Dashboard, navigate to Elastic Beanstalk > Environments.
  2. Choose Create a new environment.
Create a new environment in AWS Elastic Beanstalk.
  1. Set your environment tier to Web server environment.
  2. Click Select.
  3. In the Elastic Beanstalk > Create environment page:
    • Set the Application name field to the name for your web application. For this illustration, use axexample-dotnet.
    • From the Platform drop-down, choose .NET on Windows Server.
Select .NET platform in AWS.
  • Enable Upload your code.
  • Select Choose file.
  • Choose your axexample-dotnet.zip source code bundle for upload.
upload your source code to AWS Elastic Beanstalk.
  • Click Create environment.
  1. AWS Elastic Beanstalk creates your environment; this can take a few minutes. When the process is complete, you're redirected to your environment's dashboard.
Environment dashboard in AWS.
  1. Take note of your environment's new URL created by AWS Elastic Beanstalk:
    • You need this to create a CNAME to point to this URL.
    • In this example, create a CNAME for eb.acunetixexample.com to point to axexampledotnet-env.eba-phzhexiv.us-east-1.elasticbeanstalk.com; here is an example using the Namecheap cPanel interface:
CNAME record configuration.
  1. Once the CNAME record has been added (giving time for DNS records to propagate), you can see the web application you have created by browsing to your URL (in this example http://eb.acunetixexample.com):
Web application running on AWS.

Step 5: Test and scan your web application​

  1. Point your browser to your web application—in this example http://eb.acunetixexample.com to confirm it's running as intended.
  2. You can run a scan on your target.

Need help?​

Invicti Support team is ready to provide you with technical help. Go to Help Center

Was this page useful?