Shulou(Shulou.com)06/01 Report--

How to build a dvwa attack and defense exercise system in Centos7? in view of this problem, this article introduces the corresponding analysis and solution in detail, hoping to help more partners who want to solve this problem to find a more simple and feasible method.

1. Close selinux: [root@centos7 ~] # vim / etc/sysconfig/selinux

= changed to disabled after

Wq saves and exits

Restart the machine: [root@centos7 ~] # reboot

two。 Install the LAMP environment and start the related service [root@centos7 ~] # yum-y install httpd php php-mysql php-gd mariadb-server [root@centos7 ~] # systemctl start httpd # start the http service. [root@centos7 ~] # systemctl enable httpd # set the http service to boot automatically. [root@centos7 ~] # systemctl start mariadb # starts the mariadb service. [root@centos7 ~] # systemctl enable mariadb # set the mariadb service to boot automatically. [root@centos7] # systemctl disable firewalld & & systemctl stop firewalld & & systemctl status firewalld # turn off the firewall 3. Set the root user password for MySQL [root@centos7 ~] # mysqladmin-u root password "123456"

Check to see if you can get in:

[root@centos7] # mysql-u root-p123456MariaDB [(none)] >\ Q4. Upload the DVWA package to the centos7 host and configure related files

Extract the DVWA-master.zip package and specify / var/www/html/ as the storage path after decompression.

[root@centos7 ~] # unzip-d / var/www/html/ DVWA-master.zip [root@centos7 ~] # cd / var/www/html/ [root@centos7 ~] # mv DVWA-master dvwa # change the name DVWA-master to dvwa [root@centos7 ~] # chown-R apache. / var/www/html/dvwa/ # modify the file master and group as apache user [root@centos7 ~] # cd dvwa/config/

# change to the dvwa/config/ directory

Copy the config.inc.php.dist file and command config.inc.php:

[root@centos7config] # cp config.inc.php.dist config.inc.php

[root@centos7config] # vim config.inc.php # Edit the config.inc.php file and modify it as follows:

Modify line 21 to change the root password of your own mysql

$_ DVWA ['db_password'] =' proomssw0rd'

Modified to:

$_ DVWA ['db_password'] =' 123456'

(users also suggest changing it to root)

Modify lines 29 and 30:

$_ DVWA ['recaptcha_public_key'] =''; $_ DVWA ['recaptcha_private_key'] =''

Add the public and private keys of Google's open source free CAPTCHA reCAPTCHA

$_ DVWA ['recaptcha_public_key'] =' 6LfUZr4UAAAAACs5S68EfL7WX7WXjNHAqyWnZwIchtire; $_ DVWA ['recaptcha_private_key'] =' 6LfUZr4UAAAAACMgFi7Qh7yPvWLTQ0LVroomzIBYWa8; [root@centos7config] # vim / etc/php.ini

In the last line mode, enter: set nu displays the number of lines, jump to 815 lines (command line mode press 815, then press G to jump), modify the contents of line 815 in the file, the original Off, change to On:

Allow_url_include = Off

Change to:

Allow_url_include = On [root@centos7config] # systemctl restart httpd5. Open the browser and enter the web interface

Http://********/dvwa/setup.php (* here is the IP address of your centos7)

Skip to the login page.

Login: user: admin password: password

Log in and see this interface, which shows that it has been built! The great task has been completed! You can start to practice web infiltration!

This is the answer to the question about how to build a dvwa attack and defense exercise system in Centos7. I hope the above content can be of some help to you. If you still have a lot of doubts to be solved, you can follow the industry information channel to learn more about it.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.