Shulou(Shulou.com)06/01 Report--

Local shentou test environment

In learning network security, there is often no real experimental environment to help you improve your technical ability, and the local shentou test environment brings convenience for everyone. Local shentou test environment: an environment built locally for shentou testing, usually with a website and system environment to do shentou testing.

DVWA (Dam Vulnerable Web Application) DVWA is a set of WEB vulnerability testing program written in PHP+Mysql for routine WEB vulnerability teaching and detection, including some common security vulnerabilities such as SQL injection, XSS, remote command execution and so on.

Set up

Download dvwa

Git clone https://github.com/ethicalhack3r/DVWA

After downloading, move the DVWA file to / var/www/html/

Cp-r DVWA/ / var/www/html/

Cd / var/www/html/

Give DVWA folder permissions

Chmod 777-R DVWA/ (- R is recursive, that is, all files are modified to 777 permissions)

Start the mysql database and Apache

Service apache2 start

Service mysql start

We can use the netstat command to see if it is turned on.

Netstat-anpt | grep 80

Netstat-anpt | grep 3306

Log in to mysql for authorization

Mysql-u root default mysql does not have a password

Create a dvwa library

Create database dvwa

Show databases; (view all libraries)

Authorization

Grant all privileges on. To dvwa@127.0.0.1 identified by "123qwe"; (all is all permissions,. All permission is given to all databases. Dvwa is the user name, 127.0.0.1 is the host address, "123qwe" is the password, set by yourself)

Press exit or Ctrl+c to exit after authorization is completed.

Next, modify the dvwa configuration file

Cd config/

Cp config.inc.php.dist config.inc.php

Config.inc.php.dist is the default configuration file for dvwa. We don't want to delete it as a backup.

Now modify the configuration

Vim config.inc.php

Vim simple usage: I to enter the editing mode, that is, to modify the content, key control can be; Esc exit to the general mode;: enter the command line mode, enter w to save, Q to exit, wq is to save exit. After we enter the edit mode, modify the configuration and press Esc to exit to the general mode: wq exit.

The modified place here is db_server, where it is changed to the host address at the time of authorization, db_database to the dvwa library created, db_user to the user name at the time of authorization, and db_password to the password given at the time of authorization.

Save and exit after modification

At this point, we visit 127.0.0.1/DVWA/setup.php directly

Click Create/Reset Database to wait a few seconds and then jump to the login screen

The default username and password is admin;password

Complete

The rest of the shentou test operation depends on your own Baidu (cover your faces manually)

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.