In this video, we are going to see how we can install dam vulnerable web application on Kali Linux.
Dvwa or dam vulnerable Web application Is a web application intentionally designed to be vulnerable
to various security vulnerabilities.
It is often used as training and learning tool to learn about web application security and for testing
the effectiveness of web application security tools.
DVD contains several types of vulnerabilities, including SQL injection, file inclusion, cross-site
request forgery, insecure, direct object reference, and many more.
Now you should be on Kali Linux or Parrot OS in VMware VirtualBox or running natively on your PC.
So in step one, we can simply install dvwa in an automated manner with kali repositories.
Just use the command sudo apt install dvwa and Kali will automatically install it.
Once installed.
You can use the command Dvwa Dash dot.
Now use the default credentials which are admin and password to log in to the web interface.
A setup page will open.
Scroll down and click on create Reset the database and your setup will complete.
Now you can access Dvwa and start your weapon testing.
Once done, you can stop Dvwa with the following command.
Dvwa Stop.
Now let's practically install Dvwa.
So back on your Kali Linux.
Open a new terminal.
And use the command sudo apt install dvwa.
It will ask for your password.
And it will automatically start installing Dvwa.
Once installed.
Use the command dash start.
We will ask for your password again.
Just use the default credentials.
A login page will appear.
Just use the default credentials to log in.
Now click on Create Reset Database.
Now all configurations will be completed.
And the login page will appear again.
Use the same credentials as before.
And you have successfully installed in an automated manner on Kali Linux with very few commands.
On the left hand side, you can see different types of attacks that you can practice.
You can change the security levels from security.
Which are available in low, medium, high and impossible categories.
You can check the instruction manual.
And once you are done weapon testing, you can stop it with desktop command.