dvwa靶场训练.rar

Contents

Introduction! 3

License! 3

Troubleshooting! 15

Further information! 16

Credits! 16

Introduction

Damn Vulnerable Web Application (DVWA) is a PHP/MySQL web application that is

damn vulnerable. Its main goals are to be an aid for security professionals to test

their skills and tools in a legal environment, help web developers better understand

the processes of securing web applications and aid teachers/students to teach/learn

web application security in a class room environment.

Damn Vulnerable Web Application (DVWA) is a RandomStorm OpenSource project.

For further details about the services and products RandomStorm offer please visit;

This file is part of Damn Vulnerable Web Application (DVWA).

Damn Vulnerable Web Application (DVWA) is free software: you can redistribute it

and/or modify it under the terms of the GNU General Public License as published by

the Free Software Foundation, either version 3 of the License, or (at your option) any

later version.

Damn Vulnerable Web App (DVWA) is distributed in the hope that it will be useful,

but WITHOUT ANY WARRANTY; without even the implied warranty of

MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU

General Public License for more details.

You should have received a copy of the GNU General Public License along with

Warning

Damn Vulnerable Web App is damn vulnerable! Do not upload it to your hosting

provider's public html folder or any working web server as it will be compromised. We

recommend downloading and installing XAMPP onto a local machine inside your

LAN which is used solely for testing.

Web App (DVWA). We have made the purposes of the application clear and it should

not be used maliciously. We have given warnings and taken measures to prevent

way to install DVWA is to download and install 'XAMPP' if you do not already have a

web server setup.

XAMPP is a very easy to install Apache Distribution for Linux, Solaris, Windows and

Mac OS X. The package includes the Apache web server, MySQL, PHP, Perl, a FTP

server and phpMyAdmin.

XAMPP can be downloaded from:

http://www.apachefriends.org/en/xampp.html

DVWA default username = admin

DVWA default password = password

Once you have downloaded and installed XAMPP place the uncompressed DVWA

be accessible from your browser at http://127.0.0.1/dvwa.

Vulnerabilities

application vulnerabilities. DVWA incorporates most of the Open Web Application

Security Project's (OWASP) top 10 web application security risks for 2010 as

reported in the OWASP TOP 10 document. http://owasptop10.googlecode.com/files/

OWASP%20Top%2010%20-%202010.pdf

The OWASP Top 10 Web Application Security Risks for 2010 are: