The supplement of Web penetration test system construction

Yesterday wrote an article about building DVWA Web penetration test system, the article links are as follows:

http://wujue.blog.51cto.com/11999347/1854269

After using Phpstudy to build up the DVWA system, there are two modules in the DVWA system that cannot be used directly, the concrete modules are as follows:

650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M01/87/C9/wKiom1fhR1eQdpVGAABiv5B9SvU685.png-wh_500x0-wm_3 -wmp_4-s_1125144282.png "title=" File inclusion.png "alt=" Wkiom1fhr1eqdpvgaabiv5b9svu685.png-wh_50 "/>

File Inclusion

650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M01/87/C5/wKioL1fhR26xvgXJAACHJh-U87I594.png-wh_500x0-wm_3 -wmp_4-s_1632005741.png "title=" Insecure capthcha.png "alt=" Wkiol1fhr26xvgxjaachjh-u87i594.png-wh_50 "/>

Insecure Capthcha

In the DVWA system file inclusion and insecure CAPTCHA two modules will be error, in order to clear the learning DVWA system use of obstacles, the following explains how to solve the problem of these two modules.

Solution of File Inclusion module problem

The reason for the specific problem is not explained, look at the hint is because the configuration of allow_url_include is not open, the solution is very simple, in the Phpstudy installation directory, find the following folder, \phpstudy\php53\, My phpstudy is using the PHP5.3 version, so I need to find the php.ini file in this directory and then search for "allow_url_include" to find the configuration option, which looks like this:

Allow_url_include = Off

Modify the configuration to:

Allow_url_include = On

Then restart the Web server in Phpstudy and the problem is resolved.

Solution of Insecure Capthcha module problem

The problem with this module is that you need to register the CAPTCHA module, as long as the config.inc.php in the DVWA system modifies the configuration as follows:

$_dvwa[' recaptcha_public_key '] = ';

$_dvwa[' recaptcha_private_key '] = ';

Modify the configuration to:

$_dvwa[' recaptcha_public_key '] = ' 6LDK7XITAAZZAAJQTFL7FU6I-0APL8KHHIEAT_YJG ';

$_dvwa[' recaptcha_private_key '] = ' 6LDK7XITAZZAAL_UW9YXVUOPOIHPZLFW2K1N5NVQ ';

Then refresh the page to open the page normally.

After modifying the above two contents, the DVWA system can be used normally.

The supplement of Web penetration test system construction