0 - Intro/Setup - Damn Vulnerable Web Application (DVWA)

Intro/Setup video for Damn Vulnerable Web Application series. DVWA is an intentionally vulnerable application for you to learn about ethical hacking. I made this series for students on the MSc in cybersecurity course at Queen's University Belfast but hopefully it can help others too! In this video we will install and configure DVWA and look at useful web security tools. Hope you enjoy 🙂

↢Damn Vulnerable Web Application (DVWA)↣

👷‍♂️Resources🛠

↢Chapters↣
Start - 0:00
Intro to DVWA and the video series - 0:30
Install and configure DVWA - 2:00

[_CryptoCat]

⚠ ATTENTION 🚨
Don't visit the domain I used in the video (dvwa.co.uk), it's no longer official and was recently running a scam.

[alixerkmir]

why u did "s service mysql start" ? in 3:50

[TheCamixLand]

hello! how did you save the php.ini in mousepad? it won't let me do that, it says is read only and when I hit on save as it just doesn't save.

[Cooliofamily]

This is a long shot but i'm looking to open communication about my issue. I am running dvwa by following the same steps that youre using here. I am using parrotos, i am able to get to dvwa/setup.php page, but when i click the reset db button at the bottom i am taken to a dvwa/setup.php# page that is just completely blank. when i try to direct to the localhost/dvwa/log-in, it doesnt work either and only loads a blank page. Here is what my setup check shows. The only green colored ones arethe ones labeled 'enabled' as well:

PHP version: 7.4.33
PHP function display_errors: Disabled
PHP function display_startup_errors: Disabled
PHP function allow_url_include: Enabled
PHP function allow_url_fopen: Enabled
PHP module gd: Missing - Only an issue if you want to play with captchas
PHP module mysql: Missing
PHP module pdo_mysql: Missing

Backend database: MySQL/MariaDB
Database username: user
Database password:
Database database: dvwa
Database host: 127.0.0.1
Database port: 3306

reCAPTCHA key: Missing

Writable folder Yes
Writable folder /var/www/html/dvwa/config: Yes

Status in red, indicate there will be an issue when trying to complete some modules.

If you see disabled on either allow_url_fopen or allow_url_include, set the following in your php.ini file and restart Apache.

allow_url_fopen = On
allow_url_include = On

[erikvedelaar]

i might be a bit late but, i have a question: How do i add users to the dvwa database on security level low?

[Hejehhnsbjwk]

Why to download from github if it is available in kali repo?

[Kinoti]

Good morning sir? I have a somewhat general question I am hoping you could answer. I've seen you been on this game for quite some time now. Do you see the common vulnerabilities repeating themselves in terms of attack vectors or are there newer ones that keep cropping up? I am asking so I know which direction I should put more emphasis on. I know I should do both but where should I laser that focus. Thanks brother I appreciate the videos and the feed back.

[timedarnel]

hello I need help I can not use dvwa with burpsuite activate because burpsuite sends me an error when I want to use dvwa how to do?

[Ibrahim-wvsg]

Hi man.
Im new to this and after following your video, i restarted the PC and DVWA not on the browser anymore how to reopen it please?

[kerberonos]

What Operating System you using sir CryptoCat? And Version?

[nothingnew]

Sir i installed dvwa last week i logged in... But now its showing when i type 127.0.0.1 in browser its showing unable connect

[-mammy]

videos starting 0
this man is real hacker

[shivaranjiniramendran]

ERROR 1698 (28000): Access denied for user 'root'@'localhost'
I get this error when i enter without typing password for 'mysql -u root -p' command. Help!

[masscohacker]

your the best bro but someone like your terminal customization and color can you share some hint to make it look like that please

[editzone]

i did everything but when i inter to browser it just showing a wight screen nothing on it

[ghaithameur]

hi, I set up dvwa as per instructions and everything was
but when i click the Create/Reset Data base it just leave me to a blank page with address "localhost/dvwa/setup.php#"

[Catge]

How to change the security level without the dvwa security tab showing?

[adamsloan]

you never specify how to download portswigger CA

[GOD-jqdt]

is there any way that i can connect with you
personally

[SirPeterlll]

Im super new to kali and linux etc, so for ppl like me you are going way to fast.