How To Setup DVWA In Windows 10 Using XAMPP - LinkedIn

Agree & Join LinkedIn

By clicking Continue to join or sign in, you agree to LinkedIn’s User Agreement, Privacy Policy, and Cookie Policy.

Sign in to view more content

Create your free account or sign in to continue your search

Sign in

Welcome back

Email or phone Password Show Forgot password? Sign in

or

By clicking Continue to join or sign in, you agree to LinkedIn’s User Agreement, Privacy Policy, and Cookie Policy.

New to LinkedIn? Join now

or

New to LinkedIn? Join now

By clicking Continue to join or sign in, you agree to LinkedIn’s User Agreement, Privacy Policy, and Cookie Policy.

LinkedIn

LinkedIn is better on the app

Don’t have the app? Get it in the Microsoft Store.

Open the app Skip to main content

Before, installation of DVWA we need to what is DVWA and why we use DVWA?

Damn Vulnerable Web Application (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goal is to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications, and to aid both students & teachers to learn about web application security in a controlled classroom environment.

The aim of DVWA is to practice some of the most common web vulnerabilities, with various levels of difficulty, with a simple straightforward interface. Please note, there are both documented and undocumented vulnerabilities with this software. This is intentional. You are encouraged to try and discover as many issues as possible.

Download DVWA > http://www.dvwa.co.uk/

Download and install XAMPP on your computer

XAMPP is a free and open-source cross-platform web server solution stack package developed by Apache Friends, consisting mainly of the Apache HTTP Server, MariaDB database, and interpreters for scripts written in the PHP and Perl programming languages

Download Link > https://www.apachefriends.org/download.html

Open XAMPP and start ‘Apache and MySQL’

Extract DVWA downloaded file in htdocs that will be available in C:\xampp 

Open htdocs folder and rename ‘DVWA-master’ to ‘dvwa’ 

And Open your Browser then type 127.0.0.1/dvwa

It will show this type of error “DVWA System error – config file not found. Copy config/config.inc.php.dist to config/config.inc.php and configure to your environment.”

Recommended by LinkedIn

Why most TCP servers are multi-threaded and how to… Arpit Bhayani 1 year ago Linux Privilege Escalation Techniques Zakwan Abid 2 years ago Apache Tomcat Vulnerability CVE-2024-56337 Exposes… Cyberyami 3 days ago

A filename ‘config.inc.php.dist ‘ rename it to ‘config.inc.php’ it will be available in C:\xampp\htdocs\dvwa\config

Now, again type ‘127.0.0.1/dvwa’ in the URL of the browser,

Click on ‘Create/Reset Database’

It will show this type of error

Now, you need to edit the config file that you rename earlier step,

Then open it in Notepad and in the password tab , clear the password or make the password empty by remove the default password and give username as root. (its user database user id, password).

Now, again click on ‘Create / Reset Database’

You will see this type of output,

Click on ‘Login’ or it will automatically redirect to the login page,

The default username is ‘admin’ and the password is ‘password’.

Great, you successfully installed DVWA in your windows 10.

Like Like Celebrate Support Love Insightful Funny Comment

• Copy
• LinkedIn
• Facebook
• Twitter

Share 43

To view or add a comment, sign in

More articles by Shubham Yadav

• How to Start a Career in the Internet of Things (IoT) in Delhi, India [2025] Nov 28, 2024

  How to Start a Career in the Internet of Things (IoT) in Delhi, India [2025]

  There is a transformation taking place in the way that we live, work, and engage with technology as a result of the…

  19 1 Comment
• What is Carding and How Does It Work Oct 22, 2024

  What is Carding and How Does It Work

  The theft of credit card information and the use of that information for unlawful transactions is what is known as…

  5 1 Comment
• Top 15 Hacking Movies to Watch in 2024 Aug 23, 2024

  Top 15 Hacking Movies to Watch in 2024

  Concerns regarding cybersecurity have become increasingly important in a society in which our lives are becoming…

  6 1 Comment
• Certified Red Team Professional (CRTP) Course in Delhi Mar 16, 2024

  Certified Red Team Professional (CRTP) Course in Delhi

  Certified Red Team Professional is an entirely practical credential. Students must solve real-world challenges in our…

  1
• Is Ethical Hacking Good or Bad? Mar 16, 2024

  Is Ethical Hacking Good or Bad?

  Within the dynamic background of cybersecurity, ethical hacking has surfaced as a difficult yet essential activity…

  4
• 4 Best Cloud Data Security Practices Businesses Should Adapt Today Feb 18, 2022

  4 Best Cloud Data Security Practices Businesses Should Adapt Today

  Along with the shifting of manual databases to the cloud servers of diverse business modules, potential hackers are now…

  1
• Cyber Attackers Hit Hard to Puma Servers stealing 50% of its employees' database by Kronos Ransomware Attacks! Feb 12, 2022

  Cyber Attackers Hit Hard to Puma Servers stealing 50% of its employees' database by Kronos Ransomware Attacks!

  A worldwide attack has happened on the Puma servers resulting in half of its employees’ databases have been compromised…

  1
• Ethical Hacking Course Near Me in Delhi NCR Dec 7, 2021

  Ethical Hacking Course Near Me in Delhi NCR

  ETHICAL HACKING COURSE NEAR ME Best Ethical Hacking Course Near Me In Delhi Top best ethical hacking course near me in…

  7 1 Comment
• Ethical Hacking Course in Hindi Dec 4, 2021

  Ethical Hacking Course in Hindi

  Hacking Course In Hindi ? हैकिंग कोर्स हिंदी में The moral hacking tutorial is obtainable in Hindi to interact with the…

  1
• Importance Of Penetration Testing For Today’s Infrastructure Jul 10, 2021

  Importance Of Penetration Testing For Today’s Infrastructure

  Importance Of Penetration Testing For Today’s Infrastructure IMPORTANCE OF PENETRATION TESTING FOR TODAY’S IT…

  4

Show more See all articles

Insights from the community

• Web Development How can you use the Node.js 'path' module?
• Software Development What are the best tools for viewing HEIC images on Linux?
• Network Engineering What are the best practices for scripting Apache web server management tasks?
• Software Development What strategies help maintain a codebase for both Windows and Unix-like systems?
• Programming What are the advantages and disadvantages of using C for FTP server development?
• Web Development What does a debian developer do?
• Programming What is an HTTP response code?
• Object Oriented Design What are the benefits and drawbacks of using bridge pattern for cross-platform compatibility?
• Operating Systems How can you write Bash scripts that are compatible across different Operating Systems?
• Operating Systems How can you troubleshoot OS compatibility issues in your PHP code?

Show more Show less

Others also viewed

• Publish A Blazor Or Any Webapp On GitHub Pages For Free

  Rikam Palkar 1y

• WHAT IS NODE JS

  Ashish Ranjan 1y

• How to read or split a large log file too big for Notepad

  Valentin Komarovskiy, MBA 1y

• What Is .NET Core- A Complete Analysis

  Extern Labs Inc. 2y

• Compiling and Installing a Custom Kernel on Arch Linux

  Siddhant Bali 7mo

• Install the Apache Web Server on our Alpine Linux virtual machine

  Razvan Alexandru Ionica 1y

• Docker Based Deployment Of Legacy Application With Different PHP Versions In Windows/Mac

  ♿️ Kumar Ravi ♿️ 4y

• Created my own API interface to run Linux commands.😁😁

  Mani Bhaskar Edula 1y

• Lazy Admin TryhackMe

  Vrijanandan Kumar 6mo

• What is the difference between Android Open Source Project and Linux based systems?

  Boudour Ayari 3y

Show more Show less

Explore topics

• Sales
• Marketing
• IT Services
• Business Administration
• HR Management
• Engineering
• Soft Skills
• See All