update readme with simplier steps, including docker and vagrant usage

Author: newlight77

README.md

@@ -1,75 +1,77 @@
+# Java Vulnerabilities Experiment
+
 This is a "Vulnerable" Web Application developed by Cyber Security and Privacy Foundation(www.cysecurity.org). This app is intended for the Java Programmers and other people who wish to learn about Web application vulnerabilities and write secure code.
 
-**The full course content is now available on Github for free:**
+## Prerequisites:
 
-https://github.com/CSPF-Founder/JavaSecurityCourse
+- git
+- docker docker-compose
+- vagrant
 
+## Deploy it
 
-**The full course on Hacking and Securing Web Java Programs is available in** 
+1. Using Docker to run on a machine :
 
-https://www.udemy.com/hacking-securing-java-web-programming/
+```sh
+git clone https://github.com/softwaresecured/JavaVulnerableLab.git
+cd JavaVulnerableLab
+docker-compose up
+```
 
-**Warning**: Don't run this app in Your Main Machine or in  an online server.  Install it in Vitual Machine.
+2. Using Vagrant to run this application in a VM (containers are launched inside it) :
 
- 
-How to Use/Setup ?
--------------
+```sh
+git clone https://github.com/softwaresecured/JavaVulnerableLab.git
+cd JavaVulnerableLab
+vagrant up
+```
 
-**Method 1.Super Very Easiest Method: Docker**
-  The easiest way to use Java Vulnerable is using Docker which set up everything for you with 1 command line
+3. If not using Docker at all, you'll need to the JDBC URL in `config.properties` and `install.jsp` from :
 
-  Steps:
+```
+dburl=jdbc:mysql://mysql:3306/
+```
 
-     1. Install Docker: https://docs.docker.com/engine/installation/ 
-     2. Install docker-compose: https://docs.docker.com/compose/install/
-     3. Inside this directory, run `sudo docker-compose up` and wait untill everything is configured for you.
-     4. In your Browser, go to "http://localhost:8080/JavaVulnerableLab/install.jsp
-     5. Change the JDBC URL from jdbc:mysql://localhost:3306 to jdbc:mysql://mysql:3306
-     6. Click the Install Button
-     7. Enjoy :)
+to this :
 
+```
+jdbc:mysql://localhost:3306 
+```
 
-**Method 2.Very Easiest Method : VirtualBox VM**
-  The second most easiest way to use Java Vulnerable is using the VirtualBox VM which has everything set up and ready to use. 
-  
-  Steps:
-      
-      1. Install the VirtualBox : https://www.virtualbox.org/wiki/Downloads
-      2. Download the VM Image from here : http://sourceforge.net/projects/javavulnerablelab/files/v0.1/JavaVulnerableLab.ova/download
-      3. Import the JavaVulnerable.ova into VirtualBox.
-      4. Change the Network Settings to Host-Only Network 
-      5. Start the Machine and Log into the Machine( Credentials; username: root password: cspf) 
-      6. Start Tomcat by entering "service tomcat start" in the Terminal
-      7. Start mysql by entering "service mysql start" in the Terminal
-      8. Find the IP Address of Machine
-      9. In your Browser, go to "http://[IP_ADDRESS_OF_VM]:8080/JavaVulnerableLab/install.jsp 
-      10. Click the Install Button
-      11. Enjoy :)
-      
-**Method 3.Easiest Method : Standalone Web Application**
-  In this mehtod, you will be running an executable "JAR" file which runs the application with an embedded Apache Tomcat. 
- 
-    Steps:
-    
-        1. Install JDK
-        2. Download Executable Jar from here: http://sourceforge.net/projects/javavulnerablelab/files/v0.2/JavaVulnerableLab.jar/download
-        3. Double Click the JavaVulnerable.jar to run( if double click is not working, run this command "java -jar JavaVulnerable.jar" in your Terminal or CMD)
-        4. In your Browser, go to "http://localhost:8080/JavaVulnerableLab/install.jsp 
-        5. Click the Install Button
-        
-**Method 4. Using War file:**
-  This is a NORMAL method to deploy the WAR file. 
+4. If you want to play with it on a VPS, you'll need to the JDBC URL in `config.properties` and `install.jsp` from :
+                                      
+```
+dburl=jdbc:mysql://mysql:3306/
+```
+
+to this :
+
+```
+jdbc:mysql://IP_ADDRESS:3306 
+```
+And the link at next step will require the server hostname or IP address.
+
+5. You already have a tomcat, and want to deploy the application with a war. 
 
   Steps:
 
-       1. Install Apache Tomcat server
-       2. Go to http://[Tomcat_INSTALLED_IP]:8080/manager/  (make sure you have modified tomcat-users.xml file of the tomcat to allow the manager).
-       3. Download our WAR file from here: https://sourceforge.net/projects/javavulnerablelab/files/latest/JavaVulnerableLab.war/download
-       4. Deploy the WAR in Apache Tomcat manager.
-       5. Go to http://[Tomcat_INSTALLED_IP]:8080/JavaVulnerableLab/install.jsp 
-       6. Click the Install Button
-       
-
-Get the VulnerableSpring Project from here:
-https://github.com/CSPF-Founder/VulnerableSpring
+       1. Go to http://[Tomcat_INSTALLED_IP]:8080/manager/  (make sure you have modified tomcat-users.xml file of the tomcat to allow the manager).
+       2. Download our WAR file from here: https://sourceforge.net/projects/javavulnerablelab/files/latest/JavaVulnerableLab.war/download
+       3. Deploy the WAR in Apache Tomcat manager.
+
+## Experiment it
+
+1. Once the build is completed and the application is started, go to [/JavaVulnerableLab/install.jsp](http://localhost:8080/JavaVulnerableLab/install.jsp)
+
+2. And click on `Install` button, by leaving default values as-is.
+
+## Notes
+
+**The full course on Hacking and Securing Web Java Programs is available in** 
+
+https://www.udemy.com/hacking-securing-java-web-programming/
+
+**Warning**: It's not recommanded to run this app in `Your Main Machine` or in an `online server`.  Prefer using Docker or a VM (vagrant).
+
+You can also get the VulnerableSpring Project from [here](https://github.com/CSPF-Founder/VulnerableSpring).