Shulou(Shulou.com)06/01 Report--

Docker builds a vulnerability platform for example analysis, in view of this problem, this article introduces the corresponding analysis and solution in detail, hoping to help more partners who want to solve this problem to find a more simple and feasible method.

0x01 installation

This shooting range can be built directly with docker, which is simple and convenient.

# install dockerapt-get install docker.io#, install docker-composepip install docker-compose#, download vulstudy project, use git clone https://github.com/c0ny1/vulstudy.git0x02

There are two main types of use:

Run a single vulnerability platform and multiple vulnerability platforms at the same time.

1. Run a single vulnerability platform

Cd runs the following command under the vulnerable platform to be run (such as starting the DVWA shooting range)

Cd vulstudy/DVWAdocker-compose up-d # start Container docker-compose stop # stop Container 2. Run all vulnerable platforms at the same time

Run the following command from the root of the project

Cd vulstudydocker-compose up-d # start the container docker-compose stop # stop the container

0x03 FAQ

1. If you start the bWAPP container to visit its home page for the first time, the error will be as follows:

Connection failed: Unknown database 'bWAPP' solution: for the first time, you should visit / install.php to create the database!

two。 When DVWA is built for the first time, the database cannot be initialized under the safari browser under Apple system, and the prompt is as follows:

CSRF token is incorrect

Solution: use other browsers on Apple's system, such as Chrome.

This is the answer to the sample analysis question about building a vulnerability platform in Docker. I hope the above content can be of some help to you. If you still have a lot of doubts to be solved, you can follow the industry information channel for more related knowledge.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.