Difference between revisions of "SQLMap: Instalasi DVWA"
Jump to navigation
Jump to search
Onnowpurbo (talk | contribs) |
Onnowpurbo (talk | contribs) |
||
| (18 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
| + | '''WARNING: DVWA tidak bisa untuk PHP 7.0''' | ||
| + | |||
| + | |||
| + | |||
DVWA (Damn Vurnelabel Web App) dapat digunakan untuk belajar SQL Injection / SQLmap untuk melakukan serangan ke Web & Database-nya | DVWA (Damn Vurnelabel Web App) dapat digunakan untuk belajar SQL Injection / SQLmap untuk melakukan serangan ke Web & Database-nya | ||
==Download== | ==Download== | ||
| − | wget https://github.com/RandomStorm/DVWA/archive/v1. | + | wget https://github.com/RandomStorm/DVWA/archive/v1.9.zip |
| − | + | ||
| + | |||
==Instalasi Aplikasi Pendukung== | ==Instalasi Aplikasi Pendukung== | ||
| + | |||
| + | |||
| + | ===Ubuntu 16.04=== | ||
| + | |||
| + | Ubuntu 16.04 menjadi bermasalah karena default-nya PHP 7.0 | ||
| + | |||
| + | |||
| + | ===Ubuntu < 16.04=== | ||
sudo apt-get install apache2 php5 php5-xmlrpc php5-mysql php5-gd php5-cli php5-curl \ | sudo apt-get install apache2 php5 php5-xmlrpc php5-mysql php5-gd php5-cli php5-curl \ | ||
| Line 13: | Line 26: | ||
| − | |||
| − | + | ||
| − | mv DVWA-1. | + | ==Versi 1.9== |
| + | |||
| + | mv DVWA-1.9.zip /var/www/html | ||
cd /var/www/html | cd /var/www/html | ||
| − | unzip DVWA-1. | + | unzip DVWA-1.9.zip |
| − | cd /var/www/html/DVWA-1. | + | cd /var/www/html/DVWA-1.9/external/phpids/0.6/lib/IDS |
chmod -Rf 777 tmp | chmod -Rf 777 tmp | ||
chown -Rf nobody.nogroup tmp | chown -Rf nobody.nogroup tmp | ||
| + | chmod -Rf 777 /var/www/html/DVWA-1.9/hackable/uploads/ | ||
==Edit konfigurasi Database== | ==Edit konfigurasi Database== | ||
| − | vi /var/www/html/DVWA-1. | + | vi /var/www/html/DVWA-1.9/config/config.inc.php |
Edit | Edit | ||
| Line 39: | Line 54: | ||
$_DVWA[ 'db_password' ] = '123456'; | $_DVWA[ 'db_password' ] = '123456'; | ||
| + | |||
| + | Agar memudahkan proses belajar set security level default menjadi low, | ||
| + | |||
| + | $_DVWA[ 'default_security_level' ] = 'low'; | ||
Lakukan di shell | Lakukan di shell | ||
| Line 48: | Line 67: | ||
exit | exit | ||
| + | ==Akses ke DVWA== | ||
| + | Misalnya | ||
| + | http://ip-server/DVWA-1.9/ | ||
| + | http://192.168.0.80/DVWA-1.9/ | ||
| + | http://192.168.0.100/DVWA-1.9/ | ||
| + | http://192.168.0.111/DVWA-1.9/ | ||
| − | |||
| − | |||
| − | |||
Klik | Klik | ||
| Line 61: | Line 83: | ||
| − | Atau ke | + | Atau misalnya ke, |
| − | http://ip-server/DVWA-1.0. | + | http://ip-server/DVWA-1.9/setup.php |
| + | http://192.168.0.80/DVWA-1.9/setup.php | ||
| + | http://192.168.0.100/DVWA-1.9/setup.php | ||
| + | http://192.168.0.111/DVWA-1.9/setup.php | ||
Create / Reset Database | Create / Reset Database | ||
| − | |||
==Login ke DVWA== | ==Login ke DVWA== | ||
| Line 72: | Line 96: | ||
username admin | username admin | ||
password password | password password | ||
| + | |||
| + | |||
| + | ==Referensi== | ||
| + | |||
| + | * http://www.dvwa.co.uk/ | ||
Latest revision as of 07:56, 3 May 2017
WARNING: DVWA tidak bisa untuk PHP 7.0
DVWA (Damn Vurnelabel Web App) dapat digunakan untuk belajar SQL Injection / SQLmap untuk melakukan serangan ke Web & Database-nya
Download
wget https://github.com/RandomStorm/DVWA/archive/v1.9.zip
Instalasi Aplikasi Pendukung
Ubuntu 16.04
Ubuntu 16.04 menjadi bermasalah karena default-nya PHP 7.0
Ubuntu < 16.04
sudo apt-get install apache2 php5 php5-xmlrpc php5-mysql php5-gd php5-cli php5-curl \ mysql-client mysql-server libphp-adodb libgd2-xpm-dev \ php5-curl php-pear unzip
Versi 1.9
mv DVWA-1.9.zip /var/www/html cd /var/www/html unzip DVWA-1.9.zip
cd /var/www/html/DVWA-1.9/external/phpids/0.6/lib/IDS chmod -Rf 777 tmp chown -Rf nobody.nogroup tmp chmod -Rf 777 /var/www/html/DVWA-1.9/hackable/uploads/
Edit konfigurasi Database
vi /var/www/html/DVWA-1.9/config/config.inc.php
Edit
$_DVWA = array(); $_DVWA[ 'db_server' ] = 'localhost'; $_DVWA[ 'db_database' ] = 'dvwa'; $_DVWA[ 'db_user' ] = 'root'; $_DVWA[ 'db_password' ] = 'p@ssw0rd';
Pastikan sesuai dengan password root yang ada, misalnya
$_DVWA[ 'db_password' ] = '123456';
Agar memudahkan proses belajar set security level default menjadi low,
$_DVWA[ 'default_security_level' ] = 'low';
Lakukan di shell
mysql -u root -p123456
create database dvwa; grant ALL on root.* to dvwa@localhost; exit
Akses ke DVWA
Misalnya
http://ip-server/DVWA-1.9/ http://192.168.0.80/DVWA-1.9/ http://192.168.0.100/DVWA-1.9/ http://192.168.0.111/DVWA-1.9/
Klik
Click here to setup the database. Create / Reset Database
Atau misalnya ke,
http://ip-server/DVWA-1.9/setup.php http://192.168.0.80/DVWA-1.9/setup.php http://192.168.0.100/DVWA-1.9/setup.php http://192.168.0.111/DVWA-1.9/setup.php
Create / Reset Database
Login ke DVWA
username admin password password