I like to use vim when editing files on Linux, so I’ll install that. The app configuration files are mostly in /var/www/html One easier way to remember this command is that -it sounds like -interact - ie: I want to interact with this running container!Īnyway, once we’re inside the container, we can modify configuration files to fix any errors that we saw with the configurations. -t or, -tty which allocates a pseudo-TTY giving a communication channel by making it look like a physical terminal without being one…so it looks like we are SSHing into the container, even though we’re not really SSHing.Ĭombining those options and commands is what allows us to interact with the container.-i or, -interactive which keeps STDINput open.Replace with the actual id, like: 4c01db0b33acĭocker exec runs a command in a running container, and -it is combining two options: Which will give you the ID of the container, so that we can then: docker exec -it bash Code language: CSS ( css ) If you’re interested in fixing those, you can enter the running container by using this command from a different terminal window: docker container ls You’ll notice that a few things weren’t configured properly (denoted in red). Initially, you will be redirected to localhost/setup.php where you can check configurations and then create the database. It will ask you to login, and you can use the username admin and password password.

You can navigate to 127.0.0.1 in your browser in order to access the web application. After that, it will show you the apache access logs so you can see requests going through the webserver. You’ll have to wait until it downloads the needed images and starts the container. Now, we can go back to this command that we saw earlier: docker run -rm -it -p 80:80 vulnerables/web-dvwa Installing the DVWA on Kali with Docker Step 4: But, if you’d rather not log out or reboot at this time, you can use the above command. Otherwise, you may found that other terminal windows haven’t reloaded settings and you may get “permission denied” errors. If that doesn’t work, try to reboot the system. The best way to reload permissions, though, is to log out and back in.

We now need to reload settings so that this permissions change applies. The last step is to add our non-root user to the docker group so that we can use Docker: sudo usermod -aG docker $USER Code language: PHP ( php ) If you want to enable docker to start automatically after a reboot, which won’t be the case by default, you can type: sudo systemctl enable docker -now io Code language: CSS ( css )Īt this point, docker service is started but not enabled. Install Docker sudo apt update sudo apt install -y docker. But I’m assuming you don’t since you’re reading this, so we’ll come back to that in a moment because first, we have to install Docker on Kali. So if you already have Docker installed on your system, you should be able to go ahead and run this command. To start off, let’s find the DVWA image on Docker Hub.Īs we can see from the instructions on that page, once we have Docker installed, we can run this simple command on our Kali Linux environment in order to get it running (but if you don’t have Kali already installed, refer to these resources for help and then come back to this article): docker run -rm -it -p 80:80 vulnerables/web-dvwa Installing Docker on Kali Linuxįor reference, the main repository for this project is: Once you have Docker installed, all it takes is a simple command and a couple of minutes to get the application up and running. The beauty of using Docker is that you can set up the application in a container and spin it up or down whenever you want it with just a simple command, instead of having to download extra software, configure that software, and inevitably waste time with frustrating troubleshooting because random things aren’t working as they are supposed to! Let’s walk through how to set up the Damn Vulnerable Web Application (DVWA) on Kali with Docker so that you can test your skills and tools in a safe and legal environment.

Install dvwa xampp kali linux