Hit enter after type your search item
Home / Kali Linux / How To Install DVWA in Kali Linux 2022.1

How To Install DVWA in Kali Linux 2022.1

/
1276 Views
img

In this article, we are going to learn how to install DVWA in Kali Linux. Damn Vulnerable Web App (DVWA) is a PHP or MySQL web application that is damn vulnerable. Its main goals are to give the environment for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications.

How To Install DVWA in Kali Linux

Update/Upgrade Kali Linux

Now we have to update our Kali Linux packages index list. Open your favorite terminal and enter the following command:

sudo apt update

If you want to display all packages which are scheduled for an update.

sudo apt list --upgradable

Now we can upgrade individual packages using sudo apt install PCKAGE_NAME or we can upgrade the whole system using

sudo apt full-upgrade -y

Update Kali Linux All done. Your Kali Linux system is now fully upgraded. Or you can use all in one command to update and upgrade your Kali Linux using this command.

sudo apt update && sudo apt full-upgrade -y

 Download the latest DVWA

Now we have to download the DVWA from the official website. Or you can also download and install from GitHub.

Server Directory

cd /var/www/html/

var/www/html is just the default root folder of the web server. You can change that to be whatever folder you want. most of the popular web servers use it as the default path. where you have to install a framework such as PHP, or the folder you want to install your website on.

Download the DVWA from GitHub:

open your terminal and copy the following code and paste in the terminal.

sudo git clone https://github.com/digininja/DVWA.git

Download the DVWA from GitHub

Now our DVWA is downloaded successfully. Next step is configure the DVWA server in the Kali Linux.

Set Permissions:

Now we have to set the permission to downloaded  directory which is DVWA.

sudo chmod -R 777 DVWA

This command give the permissions to all files and directory inside the DVWA directory. Here 777 means DVWA directory readable, writable and executable by all users.

Set Permissions DVWA

Configure the DVWA

Now go the the DVWA configuration directory which location is this:

cd /var/www/html/DVWA/config/

Here we can see the default configuration file of DVWA. Make a copy of it. And rename to config.inc.php.

sudo cp config.inc.php.dist config.inc.php

Always make a copy do not rename the original file. In the future original file, may be needed. Now we have to edit the config.inc.php file. So open this file using your favorite text editor. I am using Nano text editor here.     

Configure the DVWA

sudo nano config.inc.php

Configuration file of DVWA

So this is the default configuration file of DVWA. You can use the default settings. Or you can do some changes. Like I am changing the database username and password. 

Set up the Database for DVWA

Start the Services

First of all we have to start the MySQL service  using following command in the terminal:

sudo service mysql start

Login into MySQL Server

Now we have to login inti the MySQL server. So you can use the root user as well as other users who have full permissions.

sudo mysql -u root -p

Note:- You can use the other users here. Not only root, only other user have full permissions like root user have. 

Create Database:

Now next step is create the database using this command:

create database dvwa;

Note:- Here database name should be same which is setup in the DVWA configuration file.

Create New User:

Now we have to create the new user in the MySQL. Username and password is the same which we configured the the DVWM configuration file. 

create user 'admin'@'127.0.0.1' identified by 'password';

Grant the Permissions:

Now next step is grant the all privileges to newly crate user over the database.

grant all privileges on dvwa.* to 'admin'@'127.0.0.1';

Now after this you have to exit from the database using exit command. 

Configure the PHP.INI file

Now we have to configure the php.ini file. So you can use your favorite text editor. in this tutorial we are using the nano text editor. So command is:\

sudo nano /etc/php/8.1/apache2/php.ini

Note:- Here in this tutorial I am using PHP version 8.1, in your cases it may be changed so do not panic. 

So here in this file find the Fopen Wrappers. And the two settings should be on.

  • ALLOW URL f open = on
  • ALLOW URL INCLUDE = on

Save the file and exit from the text editor. 

Start the web server:

Now final step is start the web server. We are sing apache2 web server and this server is already installed in the Kali Linux latest version.

sudo service apache2 start

Now open the web browser and open you local web server. And path is http://127.0.0.1/DVWA

Now here login with you credentials. 

DVWA login

Note:- default username is admin and passwords is password.

Now you can use the DVWA in you Kali Linux. 

Video:

Conclusion

This is the best project out there where you can polish you skills in cyber security or web securing application. You can easily deploy in your Kali Linux. Good luck!

Important Things To Remember:

The author of this article does not promote any illegal activities It is just for education purpose All the activities provided in this article, YouTube channel, and on the website techdhee.in are only for educational purposes.

If you are using and follow this tutorial for any illegal purpose, techdhee.in can not be responsible for your action.

My purpose is to educate or share the information who have not, how to secure your self from the Internet, and the world of digital.

Also, read the Disclaimer

Finally

Thank you for reading this post and keep connected to TECH DHEE to continue enjoying excellent posts. Share your views about this post in the comment section below. If you still have any queries, throw it in the comment section. If you find this post helpful, don’t hesitate to share this post on your social network. It will only take a moment, and also it is quite easy and useful for others.

Related Topics

Leave a Comment

Your email address will not be published.

This div height required for enabling the sticky sidebar
Ad Clicks : Ad Views : Ad Clicks : Ad Views : Ad Clicks : Ad Views : Ad Clicks : Ad Views : Ad Clicks : Ad Views : Ad Clicks : Ad Views : Ad Clicks : Ad Views : Ad Clicks : Ad Views : Ad Clicks : Ad Views :