Configuring the Installation Dvwa

This address: http://www.cnblogs.com/go2bed/p/4162313.html

——————————————————

What is DVWA?

Damn Vulnerable web App (DVWA) is a php/mysql Web application which is Damn vulnerable. Its main goals is-to-be-aid for security professionals-to-test their skills and tools in a legal environment, help web Developers better understand the processes of securing Web applications and aid teachers/students to Teach/learn Web appl Ication security in a class environment.

Website address: http://www.dvwa.co.uk/

———————— Body ————————

As already mentioned in the previous article (http://www.cnblogs.com/go2bed/p/4082256.html), I have configured a lamp environment. Then use the lamp environment to build DVWA.

Operating system: Ubuntu Server 14.04 64bit + LXDE desktop environment

(Machine performance is limited, XFCE is still very card, or use LXDE bar.) It's really light weight. ）

Virtual machine: WMware WorkStation

Installed: Php,mysql,apache.

DVWA version: DVWA-1.0.8

First boot up, 127.0.0.1来 look at Apache normal work:

Drag the downloaded DVWA into the virtual machine:

Copy to/var/www/html.

Direct access: 127.0.0.1/dvwa-1.0.8. Tip Unable to connect to the database.

Confirm Start MySQL First:

Edit dvwa-1.0.8/config/config.inc.php:

(This took me some time, the original is MySQL password wrong)

Create/reset Database again:

Landing:

Success:

Get an XSS first:

can be used normally.

Configuring the Installation Dvwa