Damn Vulnerable Web App Install on Fedora 16

Getting DVWA up and running takes some effort if you’ve never installed it before. The documentation is decent, but it’s spread out and not entirely complete. This is a quick install tutorial for installing DVWA with XAMPP on Fedora 16.

XAMPP

Download XAMPP. Open a shell, and su to root.

Extract the downloaded archive file to /opt:

tar xvfz xampp-linux-1.7.7.tar.gz -C /opt

XAMPP is now installed below the /opt/lampp directory.  Use ‘/opt/lampp/lampp start' to start

You should now see something like this on your screen:

Starting XAMPP 1.7.7...
LAMPP: Starting Apache...
LAMPP: Starting MySQL...
LAMPP started.

Test if it’s working by going to http://localhost.

DVWA

Download DVWA. Unzip, and place the unzipped files in your public html folder. In this case it will be placed in ‘/opt/lampp/htdocs/’

Navigate to http://127.0.0.1/dvwa/index.php to test if it’s working properly. The default user/pass is admin:password.

Database Setup

To set up the database, simply click on the Setup button in the main menu, then click on the ‘Create / Reset Database’ button. This will create / reset the database for you with some data in.

If you receive an error while trying to create your database, make sure your database credentials are correct within /opt/lampp/htdocs/config/config.inc.php

The variables are set to the following by default:

$_DVWA['db_user']='root'; $_DVWA['db_password']=''; $_DVWA['db_database']='dvwa';

If you are still getting an error message when trying to create the database, it’s most likely due to your $PATH. Follow these instructions to fix it.

export PATH=$PATH:/opt/lampp/bin

ech $PATH (to verify)

mysql -u root

UPDATE mysql.user SET Password=PASSWORD(‘password’) WHERE User=’root’;

flush privileges;

exit

mysql -u root -p [enter password to confim change]

/opt/lampp/lampp/restart

Accessing the DVWA remotely

If you are trying to access the DVWA setup remotely from another computer on the network, you will need to delete or rename the file ‘.htaccess’. It’s located in ‘/opt/lampp/htdocs/dvwa/’. You will need to do an ls -la to view it, as it’s a hidden file. This is a known issue and should be included in future documentation. DVWA: Issue 16

Prevent YouTube from Keeping a Record of The Videos You Watch

Youtube keeps a history of videos you’ve watched and search history. If you want to disable this, sign into Youtube, then go http://www.youtube.com/my_search_history.

  • You can clear your search history, and click “Pause search history”. This will prevent it from saving search results in the future.
  • On the same page, click the History tab on the left. You can clear your viewing history, and pause it by clicking the “Pause Viewing History” button.

You can also clear your “Likes” and “Favorites” from this page.

Download a Copy of ThePirateBay

This is a backup of all magnet links on The Pirate Bay. Something to keep handy.

https://thepiratebay.se/torrent/7016365

“Using this script, “allisfine” managed to copy the title, id, file size, seeds, leechers and magnet links of 1,643,194 torrents. Comments were not copied to keep the files as small as possible, and the end result is a full copy of all magnet links (magnet) on The Pirate Bay in a 90 megabytes file, 164 megabytes unzipped.”

“Here’s a copy of 17 million torrents from Bitsnoop.com, pretty much the same format but nicely categorized. It’s only 535 MB.”

 

 

Taken from Torrentfreak.com

Reset Windows Password with Encrypted Drive

This is a quick how-to for resetting your Windows password, while still knowing your disk encryption password via TrueCrypt.

Most, if not all, password reset options for windows, will not work if your hard drive is encrypted with Bitlocker/TrueCrypt.

You will need a USB flash drive or CD-R, and Hiren’s BootCD. Get it here http://www.hirensbootcd.org/download/

Once your USB drive is bootable with Hiren’s, boot up from the flash drive and select Mini XP from the Hiren’s boot menu.

  • In the bottom right in the taskbar, there is an icon called “Hiren’s BootCD Program Launcher”, Click it.
  • Go to the Security / Encryption > TrueCrypt menu
  • Click Select Device, and click your hard drive. It should be the C: drive.
  • Select a drive letter, and click Mount.
  • Click Mount Options
  • Check the box that reads “Mount partition using system encryption without pre-boot authentication”
  • Enter drive encryption password.
  • Your hard drive will now be mounted as a new drive letter (temporarily)
  • Go back to the Program Launcher, Passwords / Keys > Windows Login > NTPWEdit (Reset Xp/Vista/7 User Password)
  • The NTPWedit will open with a default path to SAM file of C:\WINDOWS\SYSTEM32\CONFIG\SAM
  • Change drive letter from C to whichever drive letter you selected to mount to, and click (Re)open.
  • Your user names will be listed.
  • Click your username, and Change Password.
  • Set the new password, and Save Changes and Exit.

Reboot and login with the new password.