Windows installation DVWA (full process)

The purpose of installing the DVWA environment is to build a vulnerability shooting range environment and conduct safe attack and defense demonstrations
1. PHPStudy software installation
2. DVWA download and installation

1. PHPStudy software installation
[1] Visit this website to download the PHPStudy software (just download the latest version) download[2] Run the .exe file in the downloaded compressed package Installation process 1
[3] Set the installation path (set the installation path yourself, It is best not to put it on the C drive). Just follow the following steps to install it.
Insert image description hereAfter installation, the following interface is displayed:
Insert image description here
Click to start the Apache service and MySQL service for testing.
Insert image description here
Enter 127.0.0.1 or localhost in the browser to access. If the following interface appears, phpstudy is successfully installed and the Apache service is started successfully.
Insert image description here
Insert image description here

2. DVWA download and installation
[1] Download DVWA-master. I did not have access to it in China when I installed it. I found it in github after scientifically surfing the Internet. I will share it directly here. I need to pick up the extraction code myself
. : 5tfg
You can also look for others by yourself, I may be far away
[2] After downloading, unzip the files in the compressed package, rename it to dvwa, and put the unzipped and renamed dvwa file into phpstudy Under the www file in the installation directory, as shown in the figure:
Insert image description here
[3] Modify the environment configuration.
Go to the current directory
and copy the file config.inc.php.dist into a copy, change the copy to config.inc.php, double-click it from Notepad Open inside.
Insert image description here
After opening, you will see the following interface: (Change db_user db_password in the file to root and root respectively) This is the account and password of the database. Save after modification.
Insert image description here
Enter 127.0.0.1/dvwa on the webpage to visit. After the dvwa interface is displayed, click Setup/Reset DB, then scroll to the bottom and click Create/Reset Database. You will see Setup successful. It is normal for me to display it
Insert image description here
here because I It has been installed before. When
you install it for the first time, you may encounter
(1) reCAPTCHA key: Missing
(2) PHP function allow_url_include: Disabled
. Solve the following problems in order;
(1) Re-open the config.inc.php file under dvwa and find it in the file. These two strings of codes

$_DVWA[ 'recaptcha_public_key' ]  = ' '
$_DVWA[ 'recaptcha_private_key' ] = ' '

Enter these two strings of keys
public:
6LdJJlUUAAAAAH1Q6cTpZRQ2Ah8VpyzhnffD0mBb
private:
6LdJJlUUAAAAAM2a3HrgzLczqdYp4g05EqDs-W4K
Insert image description here
(2) This problem exists in phpstudy, find the following directory
and access this file (note that it is not the php.ini file in DVWA, be sure to operate it correctly)
Insert image description here
Change these two strings of codes to on

allow_url_fopen=On
allow_url_include=On

Insert image description here
Save and exit!

Finally, re-start the Apache and mysql services in phpstudy, and access the settings in 127.0.0.1/dvwa again. You can find that everything is normal, and you may jump to the login page, which means the installation is successful. Enter your account and password:
The default account and password of DVWA are: admin and password respectively.

Guess you like

Origin blog.csdn.net/weixin_45876883/article/details/130379502