DVWA shooting range environment construction

I. Introduction to DVWA

DVWA (Damn Vulnerable Web Application) is a PHP/MySQL web application used for security vulnerability identification. It aims to provide a legal environment for security professionals to test their professional skills and tools, and to help web developers betterThe process of understanding web application security.

Second, environment construction

1. Build web pages and use phpstudy skin, phpStudy is a program integration package for PHP debugging environment.This package integrates the latest Apache+PHP+MySQL+phpMyAdmin, one-time installation, and can be used without configuration. It is a very convenient and easy-to-use PHP debugging environment.This environment uses WNMP and uses windows to build.

2. Download DVWA at DVWA - Damn Vulnerable Web Application

Unzip the downloaded DVWA to the root directory of the web page of phpstudy (in this experiment, I installed Xiaopi on the C drive)

3. Create a web page

4.Access 127.0.0.1:7777 (port set by yourself)

The above error will appear

**5.**Resolve the error reported in the third step, find the directory where DVWA is decompressed to Xiaopi, find the file below, remove the file config.inc.php.dist suffix and change it to config.inc.php

**6.** Restart phpstudy to visit the webpage again, you can visit, but the PHP item appears disabled, you need to change this option to enable

Modify the php configuration file in phpstudy and change allow_url_include=off in php.ini to allow_url_include=on

**7.** Restart phpstudy, create or connect to the database, the following error will be prompted

Indicates that the database connection is misplaced. At this time, it is necessary to modify the configuration file of the DVWA connection data and modify it to the database password, database name and user on phpstudy

**8.**Restart phpstudy, log in to the webpage account: admin, password password, enter the webpage, complete the construction

Let me introduce myself first. The editor graduated from Shanghai Jiaotong University in 2013. I worked in a small company and went to big factories such as Huawei and OPPO. I joined Alibaba in 2018, until now.I know that most junior and intermediate java engineers want to upgrade their skills, they often need to explore their own growth or sign up to study, but for training institutions, the tuition fee is nearly 10,000 yuan, which is really stressful.Self-learning that is not systematic is very inefficient and lengthy, and it is easy to hit the ceiling and the technology stops.Therefore, I collected a "full set of learning materials for java development" for everyone. The original intention is also very simple. I hope to help friends who want to learn by themselves but don't know where to start, and at the same time reduce everyone's burden.Add the business card below to get a full set of learning materials