dvwa-docker

KO | EN

gitlite — search

#hacktoberfest #react #ai #go #rust #macos #windows #awesome #kubernetes #awesome-list #pytorch #security #openai #open-source

(★ 13)

A Docker run and use impelementation of DVWA

dvwa-docker 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Dockerized DVWA

[![Commit Build](https://github.com/kaakaww/dvwa-docker/actions/workflows/commit-build-and-pub.yml/badge.svg)](https://github.com/kaakaww/dvwa-docker/actions/workflows/commit-build-and-pub.yml)
[![Weekly Build](https://github.com/kaakaww/dvwa-docker/actions/workflows/weekly-build-and-pub.yml/badge.svg)](https://github.com/kaakaww/dvwa-docker/actions/workflows/weekly-build-and-pub.yml)
[![](https://img.shields.io/docker/pulls/kaakaww/dvwa-docker.svg)](https://hub.docker.com/r/kaakaww/dvwa-docker)
[![](https://img.shields.io/badge/github-kaakaww%2Fdvwa--docker-red.svg)](https://github.com/kaakaww/dvwa-docker "github.com/kaakaww/dvwa-docker")
[![License](https://img.shields.io/badge/license-MIT-%233DA639.svg)](https://opensource.org/licenses/MIT)

> Damn Vulnerable Web Application (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goal is to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and to aid both students & teachers to learn about web application security in a controlled class room environment.
>
> https://github.com/digininja/DVWA

[DVWA](https://github.com/digininja/DVWA) has an official Docker image available at [Dockerhub](https://hub.docker.com/r/vulnerables/web-dvwa/), but at this point they are not producing an image from the current code base.

HUGE THANK YOU TO [cytopia](https://hub.docker.com/r/cytopia/dvwa) who built a docker compose version of latest DVWA. For our uses, it's a little bit heavy and not quickly accessible (still needs database initialization) and is multiple images. We wanted something that was a bit more simple to run and use instantly. This image work is based upon work they have done!

We publish an amd64, arm64, and arm/v7 version of this image weekly. If you want a *NOW* up-to-date version, you can use the here provided Dockerfile. The images are built every Sunday night or when we make tweaks to this repository and are pushed to [Dockehub](https://hub.docker.com/r/kaakaww/dvwa-docker).

**Available Architectures:**  `amd64`, `arm64`, `arm/v7`

## :whale: Available Docker image versions

[![](https://img.shields.io/docker/pulls/kaakaww/dvwa-docker.svg)](https://hub.docker.com/r/kaakaww/dvwa-docker)
[![Docker](https://badgen.net/badge/icon/:latest?icon=docker&label=kaakaaw/dvwa-docker)](https://hub.docker.com/r/kaakaww/dvwa-docker)

#### Rolling releases

The following Docker image tags are rolling releases and are built and updated every Sunday.

[![weekly](https://github.com/kaakaww/dvwa-docker/actions/workflows/weekly-build-and-pub.yml/badge.svg)](https://github.com/kaakaww/dvwa-docker/actions/workflows/weekly-build-and-pub.yml)

| Docker Tag            | Git Ref | PHP | Available Architectures                      |
|-----------------------|---------|-----|----------------------------------------------|
| **`latest`**          | main     | 8.1 | `amd64`, `arm64`, `arm/v7` |

## :tada: Install
Docker/Podman Run In forground
```bash
docker run --rm -it -p 8080:80 kaakaww/dvwa-docker:latest

```
at this point you can use DVWA by accessing https://localhost:8080 or

Clone repository from GitHub:
```bash
git clone https://github.com/kaakaww/dvwa-docker
```

## :zap: Start
Inside the cloned repository (`docker-dvwa/` directory):
```bash
docker build . -t docker-dvwa
docker run -rm -p 8080:80 docker-dvwa
```

## :no_entry_sign: Stop
Inside the cloned repository (`dvwa-docker/` directory):
```bash
docker stop docker-dvwa
```

## :computer: Usage

After running `docker run` you can access DVWA in your browser via:

* Url: http://localhost:8080
* User: `admin`
* Pass: `password`

## :star: Features

* :whale: - Works out of the box on Linux, MacOS and Windows via Docker
* :repeat: - Docker images are [updated every Sunday](https://hub.docker.com/r/kaakaww/dvwa-docker) against [DVWA](https://github.com/digininja/DVWA) main branch
* :open_file_folder: - Bundles [Adminer](https://www.adminer.org/) to inspect the database

## :wrench: Configuration

This setup allows you to configure a few settings via the `Dockerfile` file to change settings in your own image.

| Variable             | Default | Settings |
|----------------------|---------|----------|
| `RECAPTCHA_PRIV_KEY` |         | Required to make the captcha module work. (See [FAQ](#bulb-faq) section below) |
| `RECAPTCHA_PUB_KEY`  |         | Required to make the captcha module work. (See [FAQ](#bulb-faq) section below) |
| `PHP_DISPLAY_ERRORS` | `0`     | Set to `1` to display PHP errors (if you want a really easy mode) |

The following `Dockerfile` file variables are default settings and their values can also be changed from within the web interface:

| Variable | Default | Settings |
|------------------|---------|----------|
| `SECURITY_LEVEL` | `low` | Adjust the difficulty level for the challenges[1] (`low`, `medium`, `high` or `impossible`) |
| `PHPIDS_ENABLED` | `0` | Set to `1` to enable PHP WAF/IDS[2] (off by default) |
| `PHPIDS_VERBOSE` | `0` | Set to `1` to display WAF/IDS reasons for blocked requests |

> [1] For the `SECURITY_LEVEL` changes to take effect, you will have to clear your cookies. Alternatively change it in the web interface. 
> [2] WAF (Web Application Firewall) / IDS (Intrusion Detection System)

## :bulb: FAQ

<details><summary>Q: How can I run DVWA with a different PHP version?</summary>
 
Changing the base reference in your own version of this Dockerfile is possible. Change `from php:8.1-apache` to the version you desire and build the image: 
</details>

<details><summary>Q: How can I reset the database and start fresh?</summary>
 
Hit the reset database button in DVWA OR rebuild the docker container. Either with set the database fresh.

</details>

<details><summary>Q: How can I view Apache access or error log files?</summary>
 
Log files are piped to stderr from the Docker container and you can view them via:

```bash
docker attach <container-id|container-name>
```

</details>

<details><summary>Q: How can I get a shell on the web server container?</summary>
 
 <img class="emoji" alt="warning" height="20" width="20" src="https://github.githubassets.com/images/icons/emoji/unicode/26a0.png"> Note: Doing so is basically cheating, you are supposed to gain access to the machine via exploitation. 
You can enter the running web server container as root via:

```bash
docker exec -it <container-id|container-name> /bin/bash
```

</details>

<details><summary>Q: How do I setup the reCAPTCHA key?</summary>
 
 Go to <a href="https://www.google.com/recaptcha/admin">https://www.google.com/recaptcha/admin</a> and generate your captcha as shown below: 
 <ul>
 <li>Ensure to choose <code>reCAPTCHA v2</code></li>
 <li>Ensure to add all domains you plan on using</li>
 </ul>
 <a href="doc/captcha-01.png"><img src="doc/captcha-01-thumb.png" /></a>
 <ul>
 <li>Add <code>SITE KEY</code> to the <code>RECAPTCHA_PUB_KEY</code> variable in your <code>Dockerfile</code> file</li>
 <li>Add <code>SECRET KEY</code> to the <code>RECAPTCHA_PRIV_KEY</code> variable in your <code>Dockerfile</code> file</li>
 </ul>
 <a href="doc/captcha-02.png"><img src="doc/captcha-02-thumb.png" /></a>

</details>

<details><summary>Q: How can I access/view the MySQL database?</summary>
 
 <img class="emoji" alt="warning" height="20" width="20" src="https://github.githubassets.com/images/icons/emoji/unicode/26a0.png"> Note: Doing so is basically cheating, but if you really need to, you can do so. 
 This Docker image bundles <a href="https://www.adminer.org/">Adminer</a> (a PHP web interace similar to phpMyAdmin) and you can access it here: <a href="http://localhost:8080/adminer.php">http://localhost:8080/adminer.php</a> 
 <ul>
 <li>Server: <code>127.0.0.1</code></li>
 <li>Username: <code>dvwa</code></li>
 <li>Password: <code>p@ssw0rd</code></li>
 </ul>
 <img src="doc/adminer.png" />

</details>

<details><summary>Q: How can I build the Docker image locally?</summary>
 
To build or rebuild the Docker image against new updates in <a href="https://github.com/digininja/DVWA">DVWA master branch</a>, simply do the following:

```bash
# This is building the image for the default PHP version
docker build -t <name-of-image> .
```

</details>

## :page_facing_up: License

**[MIT License](LICENSE.md)**

dvwa-docker

dvwa-docker 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

dvwa-docker

dvwa-docker 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README