How To Setup DVWA In Windows 10 Using XAMPP -

Post Views: 700

How To Setup DVWA In Windows 10 Using XAMPP

Before, installation of DVWA we need to what is DVWA and why we use DVWA?

Damn Vulnerable Web Application (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goal is to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and to aid both students & teachers to learn about web application security in a controlled class room environment.

The aim of DVWA is to practice some of the most common web vulnerabilities, with various levels of difficulty, with a simple straightforward interface. Please note, there are both documented and undocumented vulnerabilities with this software. This is intentional. You are encouraged to try and discover as many issues as possible.

Download DVWA >http://www.dvwa.co.uk/

Download and install XAMPP on your computer

XAMPP is a free and open-source cross-platform web server solution stack package developed by Apache Friends, consisting mainly of the Apache HTTP Server, MariaDB database, and interpreters for scripts written in the PHP and Perl programming languages

Download Link >https://www.apachefriends.org/download.html

Open XAMPP and start ‘Apache and MySQL’

Extract DVWA downloaded file in htdocs that will be available in C:\xampp

Open htdocs folder and rename ‘DVWA-master’ to ‘dvwa’

And Open your Browser then type 127.0.0.1/dvwa

It will show this type of error “DVWA System error – config file not found. Copy config/config.inc.php.dist to config/config.inc.php and configure to your environment.”

A filename ‘config.inc.php.dist ‘ rename it to ‘config.inc.php’ it will be available in C:\xampp\htdocs\dvwa\config

Now, again type ‘127.0.0.1/dvwa’ in url of the browser,

Click on ‘Create/Reset Database’

It will show this type of error

Now, you need to edit config file that you rename earlier step,

Then open it by Notepad and in password tab , clear the password or make password empty by remove default password and give username as root. (its user database user id , password).