How to install Docker and set up DVWA (Damn Vulnerable Web Application)

How to install Docker and set up DVWA (Damn Vulnerable Web Application)

Dharmendra Kumar Dharmendra Kumar

Dharmendra Kumar

Cybersecurity Enthusiast | CTF Player | Security Researcher |Jr Penetration tester| VAPT | Data Structures & Algorithms | C & Python Programming

发布日期: 2024年8月30日
+ 关注

Description

Damn Vulnerable Web Application (DVWA) is a PHP/MySQL web application that is intentionally vulnerable to various web vulnerabilities. It’s designed as a learning tool for security enthusiasts, developers, and anyone interested in web application security. The main purpose of DVWA is to provide a safe environment where users can practice their skills in identifying, exploiting, and defending against web vulnerabilities.

Analysis

Step:- 1

The command sudo su is used to gain root privileges on a Unix-based system. When executed, it allows the user to switch to the root account, providing administrative access to the system.

Step:-2

The command apt install docker.io is used to install Docker on your system.

Step:-3

Go to the link https://github.com/eystsen/pentestlab

Step:-4 then use this command

git clone https://github.com/eystsen/pentestlab.git

Step:-5 change the directory

Step:-6 ./pentestlab.sh start dvwa this command is use to start dvwa

Step:-7 Then fll usernmae is admin and Password password and click to login button

Step:-8 Then click to create /reset database button

Step:-9 Then fll usernmae is admin and Password password and click to login button

Step:-10 Finally Installed Dvwa with help to doker

Thankyou for Visiting

要查看或添加评论，请登录

Dharmendra Kumar的更多文章

  • DVWA CSRF REPORT AND ARTICLE
    2025年3月2日

    DVWA CSRF REPORT AND ARTICLE

    Vulnerability Name: Cross Site Request Forgery Affected Vendor: DVWA Affected Product Name:…

  • HacktheBox machine "Crocodile"
    2024年10月22日

    HacktheBox machine "Crocodile"

    Description The exploitation vector leverages weak access control and misconfigurations across two services: an FTP…

  • HacktheBox machine "Sequel"
    2024年10月18日

    HacktheBox machine "Sequel"

    Description Databases store critical information, such as usernames, passwords, and other sensitive data, making them a…

  • HackTheBox machine "Appointment"
    2024年10月18日

    HackTheBox machine "Appointment"

    Description Appointment is a web-application-oriented box focused on SQL Injection. The target is a website with a…

    1 条评论
  • HacktheBox "machine" Redeemer
    2024年10月10日

    HacktheBox "machine" Redeemer

    Description In this lab, we explore Redis, a high-performance in-memory database, typically used for caching frequently…

  • HacktheBox "machine" Dancing
    2024年10月10日

    HacktheBox "machine" Dancing

    Description SMB (Server Message Block) is a network protocol primarily used for sharing files, printers, and other…

  • HacktheBox "machine" Fawn
    2024年10月9日

    HacktheBox "machine" Fawn

    Description The File Transfer Protocol (FTP) is widely used for transferring files between clients and servers, but it…

  • HacktheBox "machine" Meow
    2024年10月9日

    HacktheBox "machine" Meow

    Description Enumeration is a crucial initial step in penetration testing, where information about a target system is…

    1 条评论
  • PortSwigger Cross-site scripting Lab-7
    2024年10月5日

    PortSwigger Cross-site scripting Lab-7

    Description Reflected Cross-Site Scripting (XSS) occurs when an attacker injects malicious scripts into web pages that…

    2 条评论
  • PortSwigger Cross-site scripting Lab-6
    2024年10月5日

    PortSwigger Cross-site scripting Lab-6

    Description This lab features a DOM-based cross-site scripting (XSS) vulnerability on the homepage. It utilizes…

社区洞察

其他会员也浏览了