DVWA: Difference between revisions

From Network Security Wiki
Content added Content deleted
(Created page with "Category:Hacking __TOC__ <br /> {{UC}} <br /> ;References <references/> <br /> <br /> <br /> {{DISQUS}}")
 
No edit summary
 
(4 intermediate revisions by the same user not shown)
Line 1: Line 1:
[[Category:Hacking]]
[[Category:Hacking]]
__TOC__
__TOC__
<br />


Source: [https://linuxsecurityblog.com/2016/01/28/install-dvwa-on-ubuntu/ linuxsecurityblog.com], [https://th3phantoms.blogspot.in/2017/04/install-dvwa-on-ubuntu-server-1604.html th3phantoms.blogspot.in]
{{UC}}

Installation:
sudo apt update && sudo apt upgrade
sudo apt install apache2 mysql-server libapache2-mod-php7.0 libapache2-mod-fastcgi php7.0-fpm php7.0 php-mysql php7.0-mbstring php7.0-gd

When prompted, create a password for MySQL.

Edit PHP function:
sudo vim /etc/php/7.0/apache2/php.ini
allow_url_include = On

In the bottom of apache.conf add the hostname:
nano /etc/apache2/apache2.conf
ServerName localhost

Download the DVWA files:
https://github.com/ethicalhack3r/DVWA/archive/master.zip

Rename config.inc.php and Edit MySQL password:
sudo mv /var/www/html/dvwa/config/config.inc.php.dist /var/www/html/dvwa/config/config.inc.php
sudo vim /var/www/html/dvwa/config/config.inc.php
$_DVWA[ 'db_password' ] = 'dbpassword';

Give the write permission to folder and file:
sudo chmod 777 /var/www/html/dvwa/hackable/uploads/

If there are access related issue then only make the directory globally writeable:
sudo chmod -R 777 /var/www/html/dvwa

Create DVWA database:
mysql -u root -p
create database dvwa;
exit

Open the application & scrolling down and find the button Create / Reset Database
http://10.10.10.1/dvwa/setup.php

Restart Apache:
sudo service apache2 restart

Access the application:
http://10.10.10.1/dvwa/
username: admin
password: password





Latest revision as of 20:19, 25 May 2018

Source: linuxsecurityblog.com, th3phantoms.blogspot.in

Installation: 

sudo apt update && sudo apt upgrade
sudo apt install apache2 mysql-server libapache2-mod-php7.0 libapache2-mod-fastcgi php7.0-fpm php7.0 php-mysql php7.0-mbstring php7.0-gd

When prompted, create a password for MySQL.

Edit PHP function: 

sudo vim /etc/php/7.0/apache2/php.ini 
allow_url_include = On

In the bottom of apache.conf add the hostname: 

nano /etc/apache2/apache2.conf
ServerName localhost

Download the DVWA files: 

https://github.com/ethicalhack3r/DVWA/archive/master.zip

Rename config.inc.php and Edit MySQL password: 

sudo mv /var/www/html/dvwa/config/config.inc.php.dist /var/www/html/dvwa/config/config.inc.php
sudo vim /var/www/html/dvwa/config/config.inc.php
$_DVWA[ 'db_password' ] = 'dbpassword';

Give the write permission to folder and file: 

sudo chmod 777 /var/www/html/dvwa/hackable/uploads/

If there are access related issue then only make the directory globally writeable: 

sudo chmod -R 777 /var/www/html/dvwa

Create DVWA database: 

mysql -u root -p
create database dvwa;
exit

Open the application & scrolling down and find the button Create / Reset Database 

http://10.10.10.1/dvwa/setup.php

Restart Apache: 

sudo service apache2 restart

Access the application: 

http://10.10.10.1/dvwa/
username: admin
password: password



References





{{#widget:DISQUS |id=networkm |uniqid=DVWA |url=https://aman.awiki.org/wiki/DVWA }}

Retrieved from "https://aman.awiki.org/wiki/DVWA?oldid=2368"