web安全系列之环境准备

准备环境

安装kali linux 2.0

略

安装centos 7

略

安装mysql

centos7 安装mysql详细流程.

关于MySQL5.7版本以上默认密码的问题.

安装 java

jdk下载以前版本需要的账号.

安装 Apache Tomcat

安装略
停止防火墙，否则外面访问不了

systemctl disable firewalld
systemctl stop firewalld 

安装PHP

yum install php
yum install php-fpm.x86_64

启动php-fpm

php-fpm -D

修改php配置

vi /etc/php.ini
查看php-fpm master进程ID
ps aux | grep php-fpm
重启master进程
kill -USR2 2123

安装 Nginx

CentOS 7，使用yum安装Nginx.
nginx下php无法访问报错Primary script unknown的解决方法.
nginx配置

server {
    listen       80;
    server_name  localhost;

    #charset koi8-r;
    #access_log  /var/log/nginx/host.access.log  main;

    location / {
        root   /usr/share/nginx/html;
        index  index.php index.html index.htm;
    }

    #error_page  404              /404.html;

    # redirect server error pages to the static page /50x.html
    #
    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   /usr/share/nginx/html;
    }

    # proxy the PHP scripts to Apache listening on 127.0.0.1:80
    #
    #location ~ \.php$ {
    #    proxy_pass   http://127.0.0.1;
    #}

    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000

    location ~ \.php$ {
        root           /usr/share/nginx/html;
        fastcgi_pass   127.0.0.1:9000;
        fastcgi_index  index.php;
        #fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        include        fastcgi_params;
    }

    # deny access to .htaccess files, if Apache's document root
    # concurs with nginx's one
    #
    #location ~ /\.ht {
    #    deny  all;
    #}
}

安装 DVWA

下载DVWA
把DVWA解压到/usr/share/nginx/html下
访问http://xxx/DVWA/setup.php根据界面提示把标红的解决。之后点击下面的Create/Reset Database.即可

DVWA访问地址
http://192.168.64.135/DVWA/