Design Your Own Web Hacking Lab On Windows

lets get to work here --> 

1. Download XAMPP
Installer - 81 MB
zip -149 MB
7zip -69 MB

2.Download DVWA Click here

About DVWA( Damn Vulnerable Web App)

Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and aid teachers/students to teach/learn web application security in a class room environment.

Includes :

BruteForce
Command Execution
CSRF -
File Inclusion
SQLi
SQLi (Blind)
XSS Reflected
XSS Stored
and more

Image exceeds set limits. Click to view full size image

About XAMPP

XAMPP is an easy to install Apache distribution containing MySQL, PHP and Perl. XAMPP is really very easy to install and to use

Contain : distribution for Windows 2000, 2003, XP, Vista, and 7. This version contains: Apache, MySQL, PHP + PEAR, Perl, mod_php, mod_perl, mod_ssl, OpenSSL, phpMyAdmin, Webalizer, Mercury Mail Transport System for Win32 and NetWare Systems v3.32, Ming, FileZilla FTP Server, mcrypt, eAccelerator, SQLite, and WEB-DAV + mod_auth_mysql
I hope Most of you know about it ,




Extract XAMPP Into C:\xampp

and Delete all Files On htdocs Folder


and Paste DVWA Folder to there

now Run the XAMPP Server



Open YOur Web Browser and Type Address

PHP Code:

127.0.0.1 

and Enter

Image exceeds set limits. Click to view full size image

After Open DVWA It ask for Create Database , Click on it


as Image says
default User name - admin
password - passwod


NOw :epic::epic::epic:

you are Logged in to your Web Practicing Lab :
Please Read Intro First

Image exceeds set limits. Click to view full size image

Good Day Guys , and Happy Practicing  <
|DO NOT UPLOAD IT INTO ANY HOSTING coz It has damn Vulnerabilities

this is for a Windows , linux thread will be next 

Web Hacking with DVWA

(DVWA) Damn Vulnerable Web Application  is a collection of website hacking tool based on PHP / mySQL. DVWA may be an option for beginners to learn web hacking web hacking techniques from scratch. Various techniques webhacking attacks can be obtained from this tool. Besides easy to use, lightweight and complete, DVWA run through a local server (localhost) using WAMP / XAMP / LAMP and others.

DVWA include some web hacking tools such as :
- SQL Injection
- XSS (Cross Site Scripting)
- LFI (Local File Inclusion)
- RFI (Remote File Inclusion)
- Command Execution
- Upload Script
- Login Brute Force

Download here