Set up DVWA penetration test target

2023-01-16   ES  

directory

1. The introduction and installation of the virtual machine

2, Windows mirror operating system installation

3, the related configuration of Windows virtual machine

Four, DVWA shooting range construction


1. The introduction and installation of the virtual machine

1. Double -click to run the installation file, and then click the next step

2, I accept 

3, check the enhancement type … and continue the next step

4, remove the update and join the experience plan, the next step

5, complete, fill in the activation code later

2. Windows mirror operating system installation

1, the virtual machine created, use typical

2, installation program CD image file

3, overall process: new virtual machine, select typical -> Select the installation program CD image file-> OK installation location-> 40G+split multiple files-> complete

Only host mode: This machine is interconnected with the newly installed virtual machine, but the virtual machine cannot communicate with other virtual machines.

NAT mode: This machine is interconnected with the newly installed virtual machine, and the virtual machine and the virtual machine are also interconnected, but the outside world cannot access you.

Bridge mode: This machine is interconnected with the newly installed virtual machine, and the virtual machine and the virtual machine are also interconnected. The outside world can also access your virtual machine.

3, the related configuration of Windows virtual machine

1. Use the administrator account to log in: cancel it, and then use the administrator to log in. You need to set a password for the first login

2. Configure remote control: In the start menu bar, find a computer-> attribute-> remote control-> allowed.

3. Turn off the firewall: Open the control panel, find the setting of the firewall in the panel, and close it.

4. Remote login: Enter MSTSC in the running bar

5. Install Google browser

6. Installation and configuration of phpstudy (PHPSTUDY: It is a software, function: build a website.)

Declapping PHPSTUDY2016.zip

Install VC 9 32 -bit, install PHPStudy2016

Open PHPSTUDY-Start

If the Apache launch fails, it may be occupied by port 80, you need to modify the port step:

Other options menu-PHPSTUDY settings-port conventional settings

Modify port 80 to other ports such as 8088

Use ipconfig to query the server2008 IP address

Copy IP address to the browser of this machine open

7. Set the name of not hidden

Click Windows Resource Management-Organization-Folder and Search Options-View

Four, DVWA shooting range construction

1st Step: Compress the DVWA installation package to PHPSTUDY \ WWW directory

Delete these 3 files selected

Step 2: Configure the database

c: \ phpstudy \ www \ dvWa-Master/Configure/configure.inc.php.disc renamed the DISC suffix in the file to remove the file

After renamed it, it is config.inc.php

This machine visits the server2008 IP again

Step 3: Modify the configuration file.

1. Change the value of all_url_include in php.ini to on

ctrl+f search, all_url_include is modified to all_url_include = on, ctrl+s save

2. Configure C: \ PHPSTUDY \ www \ dvWa-Master \ config \ configure.inc.php

$_DVWA[ ‘db_user’ ]     = ‘dvwa’;

$_DVWA[ ‘db_password’ ] = ‘dvwa’;

These two modifications are

$_DVWA[ ‘db_user’ ]     = ‘root’;

$_DVWA[ ‘db_password’ ] = ‘root’;

2.1) Configuration $ _dvwa [‘recaptcha_public_key’] = ‘6LDK7XITAAAAAAJQTFL7FU6I-0apl8khhieat_yjg’;

2.2) Configure $ _dvwa [‘recaptcha_private_key’] = ‘6LDK7XITAZZAAL_UW9YXVUOPZLFW2K1N5NVQ’;

Step 4: Create a database

The default account is: admin password: password

Such a shooting range is completed.

or use the following configured PHPSTUDY/DVWA, unzip it to the C drive and use it

Link: https://pan.baidu.com/s/1NY- LF6AR2DKRXONMR8_OEG Password: SLV7

source

Random Posts

Ubuntu The environment of running YOLOV3 projects (data sets, GitHub, Anaconda, VSCode, NVIDIA driver, CUDA, CUDA compilation, CUDNN)

Records of UE4 Create Custom Configuration File/Configuration Items

jsonajax Submit the JSON format data to service and analyze

RK3288W Android8.1 Development Log (1)

MSP430F5438 timer 1S program Pillar Pillar