Setting up DVWA with XAMPP

andymc3 · 05-30-2016, 10:45 PM

This could go in several categories, such as newbie or vitualization, but I think this is the best fit.

I have a virtual Ubuntu on VMware that I'm trying to set up XAMPP and DVWA on. I found several sets of instructions that essentially boil down to "copy the dvwa folder to htdocs in lampp, then go to localhost/dvwa in web browser."

It appeared to be working successfully (yes I made sure to start all of the XAMPP services), except that as I'm trying to follow a recorded online lecture, I could see that my screen and the instructor's did not match at all. I should see a page with the DVWA logo and prompts to log in and set up the database. What I do see is a page titled "Index of /dvwa" with all the contents listed (clicking on most or all causes a different error message to be displayed).

How did I mess up a simple copy and paste? Has anyone experienced this before or does anyone have any clue what to do? This is my first time using Linux or setting up a server, so I'm totally lost.

Turbocapitalist · 06-01-2016, 12:04 PM

Quote:

Originally Posted by andymc3

I have a virtual Ubuntu on VMware ...
This is my first time using Linux or setting up a server, so I'm totally lost.

I'd rewind the VM to a snapshot prior to XAMPP, or just erase it, and then deploy a normal LAMP stack. XAMPP does everything in strange ways and puts things in strange places. By doing things the "Linux way" instead you gain the benefit of the package management system and the benefit of as good as all the guides or tutorials. It will also make it easier for others to help you since they expect files and directories to be in standard places and so on.

LAMP is what you will find out in the market.

It's also far easier to install. You will find a quick guide here: https://help.ubuntu.com/community/ApacheMySQLPHP

But the gist is:

Code:

sudo apt-get update;
sudo apt-get install lamp-server^

Yes, there is a caret in the package name. That will add what you need. Perl and Python are already there on your system.

Habitual · 06-01-2016, 12:22 PM

Quote:

Originally Posted by Turbocapitalist

I'd rewind the VM to a snapshot prior to XAMPP, or just erase it, and then deploy a normal LAMP stack. XAMPP does everything in strange ways and puts things in strange places. By doing things the "Linux way" instead you gain the benefit of the package management system and the benefit of as good as all the guides or tutorials. It will also make it easier for others to help you since they expect files and directories to be in standard places and so on.

LAMP is what you will find out in the market.

It's also far easier to install. You will find a quick guide here: https://help.ubuntu.com/community/ApacheMySQLPHP

But the gist is:

Code:

sudo apt-get update;
sudo apt-get install lamp-server^

Yes, there is a caret in the package name. That will add what you need. Perl and Python are already there on your system.

Excellent.
Also, Don't forget the "mysql root user" password if/when you are prompted to secure mysql/mariadb during the install of the LAMP Stack.
It will ask you twice for the same password.
This is NOT the system "root" password, or even your password (but it can be) but the privileged mysql "root user"

It can be as easy or difficult as you like, but I suggest using complex passwords from the very beginning.
Keep a log.

Up to you.