{"id":38057974,"url":"https://github.com/veracode/verademo","last_synced_at":"2026-01-16T20:26:52.807Z","repository":{"id":40999371,"uuid":"151252226","full_name":"veracode/verademo","owner":"veracode","description":"A deliberately insecure Java web application","archived":false,"fork":false,"pushed_at":"2025-02-20T11:38:40.000Z","size":11705,"stargazers_count":36,"open_issues_count":8,"forks_count":391,"subscribers_count":7,"default_branch":"main","last_synced_at":"2025-02-20T12:31:12.430Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/veracode.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2018-10-02T12:39:53.000Z","updated_at":"2025-02-20T11:38:45.000Z","dependencies_parsed_at":"2025-02-20T12:36:33.701Z","dependency_job_id":null,"html_url":"https://github.com/veracode/verademo","commit_stats":null,"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/veracode/verademo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/veracode%2Fverademo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/veracode%2Fverademo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/veracode%2Fverademo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/veracode%2Fverademo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/veracode","download_url":"https://codeload.github.com/veracode/verademo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/veracode%2Fverademo/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28482267,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-16T11:59:17.896Z","status":"ssl_error","status_checked_at":"2026-01-16T11:55:55.838Z","response_time":107,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2026-01-16T20:26:52.702Z","updated_at":"2026-01-16T20:26:52.790Z","avatar_url":"https://github.com/veracode.png","language":"Java","funding_links":[],"categories":[],"sub_categories":[],"readme":"# VeraDemo - Blab-a-Gag\n\n### :information_source: Notice\n\nThis project is intentionally vulnerable! It contains known vulnerabilities and security errors in its code and is meant as an example project for software security scanning tools such as Veracode. Please do not report vulnerabilities in this project; the odds are they’re there on purpose :) .\n\n## About\n\nBlab-a-Gag is a fairly simple forum type application which allows:\n* Users can post a one-liner joke.\n* Users can follow the jokes of other users or not (listen or ignore).\n* Users can comment on other users messages (heckle).\n\n### URLs\n\n* `/feed` shows the jokes/heckles that are relevant to the current user.\n* `/blabbers` shows a list of all other users and allows the current user to listen or ignore.\n* `/profile` allows the current user to modify their profile.\n* `/login` allows you to log in to your account\n* `/register` allows you to create a new user account\n* `/tools` shows a tools page that shows a fortune or lets you ping a host.\n\n\n## Run\n\nIf you don't already have Docker this is a prerequisite.\n\n```\ndocker run --rm -it -p 127.0.0.1:8080:8080 antfie/verademo\n```\n\nNavigate to: http://127.0.0.1:8080.\n\n## Exploitation Demos\n\nSee the `/docs` folder. [Pipeline Scan](https://docs.veracode.com/r/Pipeline_Scan) results of this application are in `/docs/scan_results/results.json`. \n\n## Technologies Used\n\n* Spring boot\n* MariaDB\n\n## Development\n\nTo build the container run this:\n```\ndocker pull mariadb:10.6.2\ndocker build --no-cache -t verademo .\n```\n\nTo run the container for local development run this:\n\n```\ndocker run --rm -it -p 127.0.0.1:8080:8080 --entrypoint bash -v \"$(pwd)/app:/app\" verademo\n```\n\nYou will then need to manually run the two commands within `/entrypoint.sh`. The first starts the DB in the background whereas the second compiles and runs the application. Typically a container shouldn't have multiple services but this was done for convenience.","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fveracode%2Fverademo","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fveracode%2Fverademo","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fveracode%2Fverademo/lists"}