zoukankan      html  css  js  c++  java
  • KALI搭建DVWA

    首先声明一下我不太推荐kali来搭建DVWA,因为kali默认安装的mysql的数据库是mariaDB,DVWA使用那个mariaDB数据库没有root权限

    步骤:

    1. 首先去github上下载DVWA的安装包,网址为:https://github.com/ethicalhack3r/DVWA

    2. 将下载好的压缩包解压并改名为dvwa,然后将其复制到 /var/www/html 文件夹中

    3. 打开终端,执行以下命令:
    将apache2停止:service apache2 stop
    给dvwa文件夹相应的权限:chmod -R 755 /var/www/html/dvwa
    启动mysql服务: service mysql start
    打开mysql: mysql -u root -p
    创建数据库:create database dvwa;
    退出mysql:exit
    启动apache2服务:service apache2 start
    打开浏览器,在地址栏中输入 127.0.0.1/dvwa (或者 localhost/dvwa) ,浏览器会自动跳转到127.0.0.1/dvwa/setup.php 页面,看来要大功告成了,点击页面下方
    Create/Reset Database按钮,竟然不能创建数据库,提示 Could not connect to the MySQL service. Please check the config file. 原来是相应配置文件还没有修改。
    找到/var/www/html/dvwa/config文件夹,打开其中的config.inc.php文件,将$_DVWA[ 'db_password' ] = 'p@ssw0rd'; 这一行改为$_DVWA[ 'db_password' ] = '';

    再次进入上述网址点击Create/Reset Database按钮,提示数据库创建成功。接下来就可以进入DVWA演练平台进行练习了。默认用户名为admin,密码为password。


    !!!!!!出现mysql数据库连接失败问题!!!!!!!!!
    找到php配置文件修改 PHP function allow_url_include:修改为on
    密码设置为空
    主要思路:kali的mysql默认安装的mariaDB,DVWA使用那个mariaDB数据库没有root权限,我在这的解决方法是新建一个数据库并且提权

    下面是上次解决问题是的全程终端界面

    ##########################################################################################
    root@kali:~# whichis php
    bash: whichis: 未找到命令
    root@kali:~# whereis php
    php: /usr/bin/php /usr/bin/php7.2 /usr/lib/php /etc/php /usr/share/php7.2-mysql /usr/share/php7.2-readline /usr/share/php7.2-gd /usr/share/php7.2-json /usr/share/php7.2-common /usr/share/php7.2-opcache /opt/lampp/bin/php /usr/share/man/man1/php.1.gz
    root@kali:~# cd /usr/bin/php
    bash: cd: /usr/bin/php: 不是目录
    root@kali:~# cd /etc/php/
    root@kali:/etc/php# ls
    7.2
    root@kali:/etc/php# cd 7.2/
    root@kali:/etc/php/7.2# ls
    apache2 cli mods-available
    root@kali:/etc/php/7.2# cd apache2/
    root@kali:/etc/php/7.2/apache2# ls
    conf.d php.ini
    root@kali:/etc/php/7.2/apache2# vi php.ini
    root@kali:/etc/php/7.2/apache2# grepit
    bash: grepit: 未找到命令
    root@kali:/etc/php/7.2/apache2# cd /var/www/html/
    root@kali:/var/www/html# ls
    dvwa index.html index.nginx-debian.html
    root@kali:/var/www/html# cd dvwa/
    root@kali:/var/www/html/dvwa# ls
    about.php dvwa index.php php.ini vulnerabilities
    CHANGELOG.md external instructions.php README.md
    config favicon.ico login.php robots.txt
    COPYING.txt hackable logout.php security.php
    docs ids_log.php phpinfo.php setup.php
    root@kali:/var/www/html/dvwa# cd config/
    root@kali:/var/www/html/dvwa/config# ls
    config.inc.php
    root@kali:/var/www/html/dvwa/config# vim config.inc.php
    root@kali:/var/www/html/dvwa/config# mysql -u root -p abcd
    Enter password:
    ERROR 1049 (42000): Unknown database 'abcd'
    root@kali:/var/www/html/dvwa/config# mysql -u root -p
    Enter password:
    Welcome to the MariaDB monitor. Commands end with ; or g.
    Your MariaDB connection id is 43
    Server version: 10.1.29-MariaDB-6 Debian buildd-unstable

    Copyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others.

    Type 'help;' or 'h' for help. Type 'c' to clear the current input statement.

    MariaDB [(none)]> quit
    Bye
    root@kali:/var/www/html/dvwa/config# vim config.inc.php
    root@kali:/var/www/html/dvwa/config# service apache restart
    Failed to restart apache.service: Unit apache.service not found.
    root@kali:/var/www/html/dvwa/config# service apache2 restart
    root@kali:/var/www/html/dvwa/config# service mysql restart
    root@kali:/var/www/html/dvwa/config# mysql -u root -p
    Enter password:
    Welcome to the MariaDB monitor. Commands end with ; or g.
    Your MariaDB connection id is 35
    Server version: 10.1.29-MariaDB-6 Debian buildd-unstable

    Copyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others.

    Type 'help;' or 'h' for help. Type 'c' to clear the current input statement.

    MariaDB [(none)]> use mysql;
    Reading table information for completion of table and column names
    You can turn off this feature to get a quicker startup with -A

    Database changed
    MariaDB [mysql]> update user set password=PASSWORD('') where User='root';
    Query OK, 1 row affected (0.01 sec)
    Rows matched: 1 Changed: 1 Warnings: 0

    MariaDB [mysql]> flush privileges;
    Query OK, 0 rows affected (0.01 sec)

    MariaDB [mysql]> create database dvwa;
    Query OK, 1 row affected (0.00 sec)

    MariaDB [mysql]> quit
    Bye
    root@kali:/var/www/html/dvwa/config# service mysql restart
    root@kali:/var/www/html/dvwa/config# mysql -u root -p
    Enter password:
    Welcome to the MariaDB monitor. Commands end with ; or g.
    Your MariaDB connection id is 34
    Server version: 10.1.29-MariaDB-6 Debian buildd-unstable

    Copyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others.

    Type 'help;' or 'h' for help. Type 'c' to clear the current input statement.

    MariaDB [(none)]> create user dvwa;
    Query OK, 0 rows affected (0.00 sec)

    MariaDB [(none)]> flush privileges;
    Query OK, 0 rows affected (0.00 sec)

    MariaDB [(none)]> quit
    Bye
    root@kali:/var/www/html/dvwa/config# cd /var/www/html/dvwa/config/
    root@kali:/var/www/html/dvwa/config# vi config.inc.php
    root@kali:/var/www/html/dvwa/config# service mysql restart
    root@kali:/var/www/html/dvwa/config# service apache2 restart
    root@kali:/var/www/html/dvwa/config# mysql -u root -p
    Enter password:
    Welcome to the MariaDB monitor. Commands end with ; or g.
    Your MariaDB connection id is 34
    Server version: 10.1.29-MariaDB-6 Debian buildd-unstable

    Copyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others.

    Type 'help;' or 'h' for help. Type 'c' to clear the current input statement.

    MariaDB [(none)]> quit
    Bye
    root@kali:/var/www/html/dvwa/config# mysql -u dvwa -p
    Enter password:
    Welcome to the MariaDB monitor. Commands end with ; or g.
    Your MariaDB connection id is 35
    Server version: 10.1.29-MariaDB-6 Debian buildd-unstable

    Copyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others.

    Type 'help;' or 'h' for help. Type 'c' to clear the current input statement.

    MariaDB [(none)]> showdatabases;
    ERROR 1064 (42000): You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near 'showdatabases' at line 1
    MariaDB [(none)]> show databases;
    +--------------------+
    | Database |
    +--------------------+
    | information_schema |
    +--------------------+
    1 row in set (0.00 sec)

    MariaDB [(none)]>
    MariaDB [(none)]> quir
    -> Ctrl-C -- exit!
    Aborted
    root@kali:/var/www/html/dvwa/config# mysql -u root -p
    Enter password:
    Welcome to the MariaDB monitor. Commands end with ; or g.
    Your MariaDB connection id is 36
    Server version: 10.1.29-MariaDB-6 Debian buildd-unstable

    Copyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others.

    Type 'help;' or 'h' for help. Type 'c' to clear the current input statement.

    MariaDB [(none)]> drop database dvwa;
    Query OK, 0 rows affected (0.00 sec)

    MariaDB [(none)]> show databases;
    +--------------------+
    | Database |
    +--------------------+
    | information_schema |
    | mysql |
    | performance_schema |
    +--------------------+
    3 rows in set (0.00 sec)

    MariaDB [(none)]> Ctrl-C -- exit!
    Aborted
    root@kali:/var/www/html/dvwa/config# service mysql restart
    root@kali:/var/www/html/dvwa/config# service apache2 restart
    root@kali:/var/www/html/dvwa/config# GRANT ALL PRIVILEGES ON dvwa.* TO dvwa IDENTIFIED BY"";
    bash: GRANT: 未找到命令
    root@kali:/var/www/html/dvwa/config# mysql -u root -p
    Enter password:
    Welcome to the MariaDB monitor. Commands end with ; or g.
    Your MariaDB connection id is 36
    Server version: 10.1.29-MariaDB-6 Debian buildd-unstable

    Copyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others.

    Type 'help;' or 'h' for help. Type 'c' to clear the current input statement.

    MariaDB [(none)]> GRANT ALL PRIVILEGES ON dvwa.* TO dvwa IDENTIFIED BY"";
    Query OK, 0 rows affected (0.00 sec)

    MariaDB [(none)]> FLUSH PRIVILEGES;
    Query OK, 0 rows affected (0.00 sec)

    MariaDB [(none)]> quit
    Bye
    root@kali:/var/www/html/dvwa/config# service mysql restart
    root@kali:/var/www/html/dvwa/config# service apache2 restart
    root@kali:/var/www/html/dvwa/config#

  • 相关阅读:
    Angular 一个简单的指令实现 阻止事件扩散
    怎样group by一列 select多列
    Angular Viewchild undefined
    TypeScript扩展类方法
    vmware station-ubuntu18.04 共享剪贴板
    基于R统计软件的三次样条和平滑样条模型数据拟合及预测
    R语言析因设计分析:线性模型中的对比
    R语言逻辑回归、方差分析 、伪R平方分析
    R语言多重比较方法
    R语言逐步多元回归模型分析长鼻鱼密度影响因素
  • 原文地址:https://www.cnblogs.com/threesoil/p/9855642.html
Copyright © 2011-2022 走看看