Source: linuxsecurityblog.com, th3phantoms.blogspot.in


sudo apt update && sudo apt upgrade
sudo apt install apache2 mysql-server libapache2-mod-php7.0 libapache2-mod-fastcgi php7.0-fpm php7.0 php-mysql php7.0-mbstring php7.0-gd



Edit PHP function:

vim /etc/php/7.0/apache2/php.ini 
allow_url_include = On

Download the DVWA files:

https://github.com/ethicalhack3r/DVWA/archive/master.zip

Edit MySQL password:

sudo mv /var/www/html/dvwa/config/config.inc.php.dist /var/www/html/dvwa/config/config.inc.php
vim /var/www/html/dvwa/config/config.inc.php
find this line $_DVWA[ 'db_password' ] = 'dbpassword'; 

Give the write permission to folder and file:

chmod 777 /var/www/html/dvwa/hackable/uploads/

Create DVWA database:

mysql -u root -p
create database dvwa;
exit

OPen the application

http://10.10.10.1/dvwa/

Scrolling down and find the button Create / Reset Database

   service apache2 restart
       username: admin
       password: password



References





{{#widget:DISQUS |id=networkm |uniqid=DVWA |url=https://aman.awiki.org/wiki/DVWA }}