> For the complete documentation index, see [llms.txt](https://cas-cyber.gitbook.io/cas-cybersecurity/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cas-cyber.gitbook.io/cas-cybersecurity/docker-basics/damn-vulnerable-webapp.md).

# Damn Vulnerable Webapp

### Dawn Vulnerable Webapp Installation

> docker pull vulnerables/web-dvwa

<div align="left"><img src="https://3977837039-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MfT0VPyK6X13Egd9pzy%2F-MhOFXdrpanwVN6qO0iD%2F-MhOS8tkdFxOU4LbcMnk%2Fdocker09.png?alt=media&amp;token=95ec744e-d3b2-45dd-a736-8ccc8b8ee000" alt=""></div>

> sudo docker create --name dvwa -p 80:80 -it vulnerables/web-dvwa
>
> sudo docker ps -a
>
> sudo docker start dvwa

![started docker container DVWA](https://3977837039-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MfT0VPyK6X13Egd9pzy%2F-MhOSOBgf8hvUs4Y1TCC%2F-MhT-jESYel78kWuoPBJ%2Fdocker10.png?alt=media\&token=ed2ded60-1974-469a-8464-4cce8f71c8d2)

Check ip address and port of container

> docker exec -it dvwa /bin/bash
>
> hostnmae -i
>
> ss -ntlpa

![listening on port 80 (http) and 3306 (MySQL)](https://3977837039-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MfT0VPyK6X13Egd9pzy%2F-MhOSOBgf8hvUs4Y1TCC%2F-MhT44H1hgUI29xf60ZS%2Fdocker11.png?alt=media\&token=85395142-bbd3-4feb-ae37-3317f34cf87b)

After login with admin / admin we see that some configuratrion are missing

<div align="left"><img src="https://3977837039-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MfT0VPyK6X13Egd9pzy%2F-MhOSOBgf8hvUs4Y1TCC%2F-MhT6PqQKlPk_6cjy6HB%2Fdvwa01.png?alt=media&amp;token=766e7293-880e-4ac9-bf62-d1c33138064e" alt=""></div>

Fix allow\_*url\_*&#x69;nclude

> apt update
>
> apt install nano
>
> cd /etc/php/7.0/apache2
>
> nano php.ini

<div align="left"><img src="https://3977837039-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MfT0VPyK6X13Egd9pzy%2F-MhOSOBgf8hvUs4Y1TCC%2F-MhT9CzXHFFspfsK-CNU%2Fdvwa02.png?alt=media&amp;token=4163a489-f79c-4996-b960-9392eebc89b5" alt=""></div>

> service apache2 restart

Fix recaptcha key

> nano /var/www/html/config/config.inc.php

Search for recaptcha and place private and public key here:

> 6LedPRUaAAAAAHNz7OibZK4zKY-PVxGqGt\_kdrjf&#x20;
>
> 6LedPRUaAAAAABfGeIjtnAf45ZXgYPwH\_EyU1c-G

![](https://3977837039-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MfT0VPyK6X13Egd9pzy%2F-MhOSOBgf8hvUs4Y1TCC%2F-MhTBYiLXoK3dtnCOlc1%2Fdvwa03.png?alt=media\&token=7d9c4e54-0226-42ca-bdad-8cd70a91a76f)

Now we can create the database and we are finish:

Default credentials are admin/password

<div align="left"><img src="https://3977837039-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MfT0VPyK6X13Egd9pzy%2F-MhOSOBgf8hvUs4Y1TCC%2F-MhTIE71DCWi11eGHIhO%2Fdvwa04.png?alt=media&amp;token=125d8fbb-b945-4a9b-bd9f-2027d2b10d47" alt=""></div>