Skip to main content
This document is for:
Invicti Enterprise on-demand

Deploy Invicti Shark for Java - Linux (WebSphere Liberty 19.0.0.9+ with WAR file)

This document explains how you can run a Java application in WebSphere and then use Invicti Shark to run an interactive application security testing (IAST) scan for that application.

note

This document assumes WebSphere is installed in /opt/wlp

Step 1: Prepare Invicti Shark for java​

In this example, the test application is deployed to the following URL: http://websphere-backend-proto.invicti.site:9080/axexample-java/. In a production environment, you need to change this to the hostname you use for your deployment.

  1. Create a new target for your URL.
  2. Download Invicti Shark for Java from the Invicti Enterprise UI and retain the Shark (IAST and SCA).jar file for the next step.
  3. On the WebSphere machine:
    • Create a root folder /shark
    • Copy the shark.jar file to /shark/shark.jar

Step 2: Deploy Invicti Shark and required components​

On the WebSphere machine:

  • Create a file /opt/wlp/usr/servers/defaultServer/jvm.options, and set the contents as follows:
-javaagent:/shark/shark.jar
-Dacusensor.debug.log=ON

Step 3: Deploy your application​

  1. Copy your axexample-java.war file into the /opt/wlp/usr/servers/defaultServer/dropins folder.
  2. From the terminal, restart WebSphere with:
/opt/wlp/bin/server stop
/opt/wlp/bin/server start

Step 4: Test and scan your web application​

  1. Point your browser to your web application to confirm it's running as intended.
  2. Run a scan on your target. The scan summary confirms that Invicti Shark was detected and used for the scan.

Need help?​

Invicti Support team is ready to provide you with technical help. Go to Help Center

Was this page useful?