0

I am setting up a DVWA environment and I want the directory and its files to be displayed on my browser. I have copied the DVWA files in the www folder and deleted all the files that were previously on the folder.

Now when I go to local host via my browser I get the error The requested URL / was not found on this server. I have confirmed my apache is well up and running.

Artur Meinild
  • 26,018
noickare
  • 11
  • 1
  • 1
  • 4
  • 2
    What Ubuntu version are you running? – Nick Weinberg Sep 16 '17 at 01:21
  • Could you please add a little more detail? What exactly did you do, what did you want to achieve and what happened instead? Did you encounter any warning or error messages? Please reproduce them in their entirety in your question. You can select, copy and paste terminal content and most dialogue messages in Ubuntu. (see How do I ask a good question?) – David Foerster Sep 16 '17 at 06:22
  • I wanted to view the directory from firefox by typing localhost but instead i get an error message saying The requested URL / was not found on this server – noickare Sep 16 '17 at 09:31
  • I decided to look at this app and created short manual how to install it within Ubuntu 16.04. – pa4080 Sep 16 '17 at 10:43
  • Hi, Ian, if you use XAMPP instead of the native LAMP stack, please, check the bottom of my updated answer. – pa4080 Sep 17 '17 at 08:54

1 Answers1

4

Here is a step-by-step guide how to setup DVWA within Ubuntu 16.04 and the default Apache's configuration:

Pre-Requirements

The standard Ubuntu LAMP stack, that means we have working Apache2, MySQL, PHP. Refs:

Along with next additional PHP extensions:

sudo apt update
sudo apt install php-curl php-gd php-mbstring php-mcrypt php-xml php-xmlrpc

1. Download DVWA via Git

First install Git if it is not installed - sudo apt install git - and then:

cd /var/www/html
sudo git clone https://github.com/ethicalhack3r/DVWA.git
  • The above command will download the application into the folder /var/www/html/DVWA.

2. Create configuration file

Create the configuration file /var/www/html/DVWA/config/config.inc.php:

sudo cp /var/www/html/DVWA/config/config.inc.php.dist /var/www/html/DVWA/config/config.inc.php

Edit the configuration file in this way (lines from 18 to 21):

$_DVWA = array();
$_DVWA[ 'db_server' ]   = 'localhost';
$_DVWA[ 'db_database' ] = 'dvwaDatabase';
$_DVWA[ 'db_user' ]     = 'dvwaUser';
$_DVWA[ 'db_password' ] = 'dvw@~User~p@$$w0rd';
  • Where dvwaDatabase, dvwaUser and dvw@~User~p@$$w0rd are subject of your decision.
  • To edit the file via Nano type: sudo nano /var/www/html/DVWA/config/config.inc.php.
  • To save the changes and close Nano use Ctr+X then press Y and hit Enter.

3. Grant writable permissions

You should change the ownership of certain files and folders to Apache's user www-data:

sudo chown www-data:www-data /var/www/html/DVWA/hackable/uploads/
sudo chown www-data:www-data /var/www/html/DVWA/external/phpids/0.6/lib/IDS/tmp/phpids_log.txt

4. Create MySQL Database

The steps are:

  • Login to the MySQL server from a terminal.
  • Create Database.
  • Create User.
  • Grant all privileges on the Database to the user.
  • Reload the privileges from the grant tables in the MySQL database.
  • Exit MySQL.

The commands are: 

$ mysql -u'root' -p                                                  
Enter password: *enter mysql root's password*

mysql> CREATE DATABASE dvwaDatabase;
mysql> CREATE USER 'dvwaUser'@'localhost' identified by 'dvw@~User~p@$$w0rd';
mysql> GRANT ALL PRIVILEGES ON dvwaDatabase.* TO 'dvwaUser'@'localhost';
mysql> FLUSH PRIVILEGES;
mysql> exit
  • Don't miss the semicolon (;) at the end of each sentence.

5. Enable certain PHP functions

Edit the existing /var/www/html/DVWA/config/.htaccess file with this content:

php_flag magic_quotes_gpc Off
php_flag allow_url_fopen On
php_flag allow_url_include On
php_flag display_errors On

I'm not sure you are really need to enable the function allow_url_include, but to do this you should edit your php.ini file, because this option is disabled by default. The default PHP version, within Ubuntu 16.04, is PHP7.0, so your php.ini file is located in /etc/php/7.0/apache2/ edit the file with Nano text editor and use Ctr+W to find allow_url_include, then change the line in this way: 

allow_url_include = On

You can do the above step with a single command using sed: 

sudo sed 's/allow_url_include = Off/allow_url_include = On/' /etc/php/7.0/apache2/php.ini -i.bak

Check if the value is changed and restart Apache:

cat /etc/php/7.0/apache2/php.ini | grep allow_url_include
sudo systemctl restart apache2.service

6. Open DVWA and continue with its setup

Open your browser and type: http://localhost/DVWA/. Initially you should use user: admin and passwd: admin, but next you should use user: admin and passwd: password.

enter image description here That's it.

Further reading

pa4080
  • 29,831