DVWA


DVWA (Damn Vulnerable Web Application)

Installation Steps

  1. Update System Packages

sudo apt update && sudo apt upgrade -y
  1. Install Required Packages

sudo apt install -y apache2 mariadb-server php php-mysqli php-gd libapache2-mod-php unzip
  1. Configure MySQL/MariaDB

sudo mysql_secure_installation

Follow the prompts to set a root password and secure your installation. 4. Create DVWA Database and User

sudo mysql -u root -p
CREATE DATABASE dvwa;
CREATE USER 'dvwa'@'localhost' IDENTIFIED BY 'p@ssw0rd';
GRANT ALL PRIVILEGES ON dvwa.* TO 'dvwa'@'localhost';
FLUSH PRIVILEGES;
exit
sudo apt install -y apache2 mariadb-server php php-mysqli php-gd libapache2-mod-php unzip
  1. Configure MySQL/MariaDB

sudo mysql_secure_installation
sudo mysql -u root -p
CREATE DATABASE dvwa;
CREATE USER 'dvwa'@'localhost' IDENTIFIED BY 'p@ssw0rd';
GRANT ALL PRIVILEGES ON dvwa.* TO 'dvwa'@'localhost';
FLUSH PRIVILEGES;
exit
Follow the prompts to set a root password and secure your installation.
4. Create DVWA Database and User
```bash
sudo mysql -u root -p
CREATE DATABASE dvwa;
CREATE USER 'dvwa'@'localhost' IDENTIFIED BY 'p@ssw0rd';
GRANT ALL PRIVILEGES ON dvwa.* TO 'dvwa'@'localhost';
FLUSH PRIVILEGES;
exit
sudo apt install -y apache2 mariadb-server php php-mysqli php-gd libapache2-mod-php unzip
  1. Configure MySQL/MariaDB

sudo mysql_secure_installation

Follow the prompts to set a root password and secure your installation. 4. Create DVWA Database and User

sudo mysql -u root -p

In the MySQL prompt:
```sql
CREATE DATABASE dvwa;
CREATE USER 'dvwa'@'localhost' IDENTIFIED BY 'p@ssw0rd';
GRANT ALL PRIVILEGES ON dvwa.* TO 'dvwa'@'localhost';
FLUSH PRIVILEGES;
exit
  1. Download and Install DVWA

cd /var/www/html
sudo wget https://github.com/digininja/DVWA/archive/master.zip
sudo unzip master.zip
sudo mv DVWA-master dvwa
sudo rm master.zip
  1. Configure DVWA

cd dvwa/config
sudo cp config.inc.php.dist config.inc.php
sudo nano config.inc.php

Update these lines (use the credentials you created earlier): php

$_DVWA['db_user'] = 'dvwa';
$_DVWA['db_password'] = 'p@ssw0rd';
$_DVWA['db_database'] = 'dvwa';

$_DVWA['recaptcha_public_key'] = '';
$_DVWA['recaptcha_private_key'] = '';
  1. Set Permissions

sudo chown -R www-data:www-data /var/www/html/dvwa
sudo chmod -R 755 /var/www/html/dvwa
  1. Restart Apache

sudo systemctl restart apache2
  1. Access DVWA

Open your web browser and navigate to:


http://your-server-ip/dvwa
sudo systemctl restart apache2
  1. Access DVWA

Open your web browser and navigate to:


http://your-server-ip/dvwa
  1. On the DVWA login page:

    Default credentials: admin/password
    Click on "Create / Reset Database" button
    Log in with the credentials

Last updated