Linux系统在labs目录下,Linux下搭建sqli-labs环境

Host OS: win10

Guest OS：ubuntu-14.04.5-server-amd64

使用到的工具：putty+WinSCP(上传文件)

sqli-labs下载：https://github.com/Audi-1/sqli-labs

使用LNMPweb集成开发环境，LNMP安装：https://lnmp.org/install.html

lnmp安装完成后会提示MySQL密码，默认是安装时候输入的root密码：

MySQL/MariaDB root password: yourrootpassword

并且LNMP自动start了，将下载好的sqli-labs文件上传到/home/wwwroot/default/目录

切换到sqli-labs/sql-connections目录

cd /home/wwwroot/default/sqli-labs/sql-connections

修改此目录下的db-creds.inc文件

接着运行setup-db.php：

php setup-db.php

运行失败，提示：

PHP Warning: mysql_connect(): Access denied for user 'root'@'localhost' (using password: YES) in /home/wwwroot/default/sqlilabs/sql-connections/setup-db.php on line 29 [*]...................Could not connect to DB, check the creds in db-creds.inc: Access denied for user 'root'@'localhost' (using password: YES)

切换到root用户，还是运行失败。

解决方法：

修改MySQL密码：

mysql -uroot -p

接着输入密码，

mysql> use mysql;

mysql> UPDATE user SET password=PASSWORD('mypassword') WHERE user='root';

mysql> FLUSH PRIVILEGES;

mysql> quit;

再一次php setup-db.php：

················省略

[*]...................Old database 'SECURITY' purged if exists

[*]...................Creating New database 'SECURITY' successfully

[*]...................Creating New Table 'USERS' successfully

[*]...................Creating New Table 'EMAILS' successfully

[*]...................Creating New Table 'UAGENTS' successfully

[*]...................Creating New Table 'REFERERS' successfully

[*]...................Inserted data correctly into table 'USERS'

[*]...................Inserted data correctly into table 'EMAILS'

················省略

[*]...................Old database purged if exists

[*]...................Creating New database successfully

················省略

[*]...................Creating New Table 'DCZUIX6QIR' successfully

[*]...................Inserted data correctly into table 'DCZUIX6QIR'

[*]...................Inserted secret key 'secret_Z1FL' into table

················省略

在Host OS中访问Guest OS:http://yourGuestOS-IP/sqlilabs/index.html

enjoy!