Difference between revisions of "SQLMap: Instalasi DVWA"

Latest revision as of 07:56, 3 May 2017

WARNING: DVWA tidak bisa untuk PHP 7.0

DVWA (Damn Vurnelabel Web App) dapat digunakan untuk belajar SQL Injection / SQLmap untuk melakukan serangan ke Web & Database-nya

Download

wget https://github.com/RandomStorm/DVWA/archive/v1.9.zip

Instalasi Aplikasi Pendukung

Ubuntu 16.04

Ubuntu 16.04 menjadi bermasalah karena default-nya PHP 7.0

Ubuntu < 16.04

sudo apt-get install apache2 php5 php5-xmlrpc php5-mysql php5-gd php5-cli php5-curl \
mysql-client mysql-server libphp-adodb libgd2-xpm-dev \
php5-curl php-pear unzip

Versi 1.9

mv DVWA-1.9.zip /var/www/html
cd /var/www/html
unzip DVWA-1.9.zip

cd /var/www/html/DVWA-1.9/external/phpids/0.6/lib/IDS
chmod -Rf 777 tmp
chown -Rf nobody.nogroup tmp
chmod -Rf 777 /var/www/html/DVWA-1.9/hackable/uploads/

Edit konfigurasi Database

vi /var/www/html/DVWA-1.9/config/config.inc.php

Edit

$_DVWA = array();
$_DVWA[ 'db_server' ] = 'localhost';
$_DVWA[ 'db_database' ] = 'dvwa';
$_DVWA[ 'db_user' ] = 'root';
$_DVWA[ 'db_password' ] = 'p@ssw0rd';

Pastikan sesuai dengan password root yang ada, misalnya

$_DVWA[ 'db_password' ] = '123456';

Agar memudahkan proses belajar set security level default menjadi low,

$_DVWA[ 'default_security_level' ] = 'low';

Lakukan di shell

mysql -u root -p123456

create database dvwa;
grant ALL on root.* to dvwa@localhost;
exit

Akses ke DVWA

Misalnya

http://ip-server/DVWA-1.9/
http://192.168.0.80/DVWA-1.9/
http://192.168.0.100/DVWA-1.9/
http://192.168.0.111/DVWA-1.9/

Klik

Click here to setup the database.
Create / Reset Database

Atau misalnya ke,

http://ip-server/DVWA-1.9/setup.php
http://192.168.0.80/DVWA-1.9/setup.php
http://192.168.0.100/DVWA-1.9/setup.php
http://192.168.0.111/DVWA-1.9/setup.php

Create / Reset Database

Login ke DVWA

username admin
password password

Referensi

http://www.dvwa.co.uk/

@@ Line 1: / Line 1: @@
+'''WARNING: DVWA tidak bisa untuk PHP 7.0'''
 DVWA (Damn Vurnelabel Web App) dapat digunakan untuk belajar SQL Injection / SQLmap untuk melakukan serangan ke Web & Database-nya
 ==Download==
-  wget https://github.com/RandomStorm/DVWA/archive/v1.0.8.zip
+  wget https://github.com/RandomStorm/DVWA/archive/v1.9.zip
- wget https://github.com/RandomStorm/DVWA/archive/master.zip
 ==Instalasi Aplikasi Pendukung==
+===Ubuntu 16.04===
+Ubuntu 16.04 menjadi bermasalah karena default-nya PHP 7.0
+===Ubuntu < 16.04===
   sudo apt-get install apache2 php5 php5-xmlrpc php5-mysql php5-gd php5-cli php5-curl \
@@ Line 13: / Line 26: @@
-==Extract==
- mkdir /var/www/html/dvwa
-  mv DVWA-master.zip /var/www/html
+==Versi 1.9==
+  mv DVWA-1.9.zip /var/www/html
   cd /var/www/html
-  unzip DVWA-master.zip
+  unzip DVWA-1.9.zip
-  cd /var/www/html/DVWA-master/external/phpids/0.6/lib/IDS
+  cd /var/www/html/DVWA-1.9/external/phpids/0.6/lib/IDS
   chmod -Rf 777 tmp
   chown -Rf nobody.nogroup tmp
+ chmod -Rf 777 /var/www/html/DVWA-1.9/hackable/uploads/
 ==Edit konfigurasi Database==
-  vi /var/www/html/DVWA-master/config/config.inc.php
+  vi /var/www/html/DVWA-1.9/config/config.inc.php
 Edit
@@ Line 39: / Line 54: @@
   $_DVWA[ 'db_password' ] = '123456';
+Agar memudahkan proses belajar set security level default menjadi low,
+ $_DVWA[ 'default_security_level' ] = 'low';
 Lakukan di shell
@@ Line 50: / Line 69: @@
 ==Akses ke DVWA==
-  http://ip-server/DVWA-1.0.8/
+Misalnya
+  http://ip-server/DVWA-1.9/
+ http://192.168.0.80/DVWA-1.9/
+ http://192.168.0.100/DVWA-1.9/
+ http://192.168.0.111/DVWA-1.9/
 Klik
@@ Line 58: / Line 83: @@
-Atau ke
+Atau misalnya ke,
-  http://ip-server/DVWA-1.0.8/setup.php
+  http://ip-server/DVWA-1.9/setup.php
+ http://192.168.0.80/DVWA-1.9/setup.php
+ http://192.168.0.100/DVWA-1.9/setup.php
+ http://192.168.0.111/DVWA-1.9/setup.php
   Create / Reset Database
 ==Login ke DVWA==
@@ Line 69: / Line 96: @@
   username admin
   password password
+==Referensi==
+* http://www.dvwa.co.uk/