在雲上搭建DVWA

記錄如何在騰訊雲上搭建DVWA靶場.

1.首先連線雲伺服器

Connecting to xxx.xxx.xxx.xxx:22...
Connection established.
To escape to local shell, press 'Ctrl+Alt+]'.

Welcome to Ubuntu 16.04.1 LTS (GNU/Linux 4.15.0-142-generic x86_64)

 * Documentation:  https://help.ubuntu.com
 * Management:     https://landscape.canonical.com
 * Support:        https://ubuntu.com/advantage
New release '18.04.6 LTS' available.
Run 'do-release-upgrade' to upgrade to it.


*** System restart required ***
Last login: Sun Oct  3 21:12:02 2021 from 123.15.36.11
[email protected]-0-9-ubuntu:~$ uname -a
Linux VM-0-9-ubuntu 4.15.0-142-generic #146~16.04.1-Ubuntu SMP Tue Apr 13 09:27:15 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux

2.安裝Mysql+apche+php

apt-get install mysql-server
apt-get isntall mysql-client
apt-get install libmysqlclient-dev
apt-get install apache2
apt install php
apt-get install libapache2-mod-php

3.安裝DVWA

cd /var/www/html
wget https://github.com/digininja/DVWA/archive/refs/heads/master.zip
unzip master.zip
mv DVWA-master/ dvwa

4.設定mysql

mysql -uroot -proot
create database dvwa;
grant all privileges on *.* to dvwa@localhost identified by 'dvwa';

5.配置DVWA

vim /dvwa/config/config.inc.php

$_DVWA = array();
$_DVWA[ 'db_server' ]   = '127.0.0.1';
$_DVWA[ 'db_database' ] = 'dvwa';
$_DVWA[ 'db_user' ]     = 'dvwa';
$_DVWA[ 'db_password' ] = 'dvwa';
$_DVWA[ 'db_port'] = '3306';

6.配置apache

Apache2配置目錄相關知識: https://blog.csdn.net/stay_zezo/article/details/80212552

修改apache的預設埠為9000,在雲上由於我的80埠被nginx佔用,為了避免埠衝突,所以這裡修改Apache的預設埠為9000.

vim /etc/apache2/ports.conf

Listen 9000

<IfModule ssl_module>
        Listen 443
</IfModule>

<IfModule mod_gnutls.c>
        Listen 443
</IfModule>

此時如果開啟apache服務,訪問your_ip:9000,可以看到Apache的預設頁面

修改預設站點目錄,將預設的站點目錄修改成dvwa的目錄/var/www/html/dvwa

vim sites-enabled/000-default.conf

[外鏈圖片轉存失敗,源站可能有防盜鏈機制,建議將圖片儲存下來直接上傳(img-QilmGufx-1633316989396)(C:\Users\Null\AppData\Roaming\Typora\typora-user-images\image-20211003220150551.png)]

修改dir.conf,先將預設開啟的檔案改成setup.php進行初始化,如果不改的話會直接執行index.php，進入login介面，沒有初始化會搭建失敗.

root@VM-0-9-ubuntu:/etc/apache2# vim mods-enabled/dir.conf

<IfModule mod_dir.c>
        DirectoryIndex setup.php
</IfModule>

# vim: syntax=apache ts=4 sw=4 sts=4 sr noet

然後重啟Apache服務

root@VM-0-9-ubuntu:/etc/apache2# /etc/init.d/apache2 restart

並從主機訪問雲端ip: your_ip:9000,瀏覽器會載入DVWA的初始化介面,點選建立資料庫，可能會由於幾個飄紅的選項導致失敗：這裡貼出那幾個飄紅的解決辦法

PHP函式allow_url_include：缺少

vim /etc/php/7.2/apache2/php.ini

需要將其中的allow_url_include=Off，更改為allow_url_include=On。

PHP模組gd：缺少

apt-get install php-gd

PHP模組mysql：缺少

apt-get install php7.0-mysql

再次重啟Apache服務後建立資料庫，成功後再次修改dir.conf檔案,把預設開啟的檔案修改成index.php,下次再訪問的時候就直接跳轉到登入介面:

root@VM-0-9-ubuntu:/etc/apache2# vim mods-enabled/dir.conf

<IfModule mod_dir.c>
        DirectoryIndex index.php
</IfModule>

# vim: syntax=apache ts=4 sw=4 sts=4 sr noet

[外鏈圖片轉存失敗,源站可能有防盜鏈機制,建議將圖片儲存下來直接上傳(img-kghTPZeu-1633316989399)(C:\Users\Null\AppData\Roaming\Typora\typora-user-images\image-20211003224407597.png)]

ule mod_dir.c>
DirectoryIndex index.php

vim: syntax=apache ts=4 sw=4 sts=4 sr noet


[外鏈圖片轉存中...(img-kghTPZeu-1633316989399)]

參考連結：https://www.jianshu.com/p/5251d43388bc

在雲上搭建靶場