Web App Pentesting - Setting Up OWASP bWAPP With Docker

Key Takeaways

[Music] hey guys hackersploit here back again with another video welcome back to the web app pen testing series in this video i'm going to be taking you through the process of setting up oaspbwap uh this is going to be one just one of the uh web applications that we are going to be using uh during the web app pen testing series for a few reasons number one i really like it i like the fact that it allows you to sort between various security levels uh as well as various vulnerabilities so you have the ability to specify uh you know a specific vulnerability that you'd like to learn about and your it also gives you the ability to test it and see how that vulnerability works and how it can be exploited so we're only going to be using it for a few sections but again uh in terms of the setup it can be quite confusing why is it confusing because it's developed in php right and it needs to run on a lamp stack or you know in the case of windows a wamp stack so that means you need to have linux apache mysql php uh the reason you need a database is primarily because it has authentication so you know and that also ties into the vulnerabilities uh around all that are that correspond to authentication so again getting it set up um you know as a beginner can be quite difficult which is why i've created a few uh you know docker images or really just one docker image uh that will allow you to get it up set up immediately right so if you're not familiar with bwap uh b web or also known as buggy web application is a free and open source deliberately uh insecure web application and it helps security enthusiasts developers and students to discover and to prevent web vulnerabilities right and again the the reason i like it is primarily because it has you know a ton of vulnerabilities as it says here and it covers all major known bugs including all the risks from the os top 10 project now it's very important to note that this uh the latest release of bwap was quite a few years ago so it's not up to date on the os top 10 in regards to the most important vulnerabilities uh but it contains pretty much all of them even some of the new ones uh so again it's all up to you uh in regards to what you want to explore right now in terms of setting it up which is where a lot of people you know seem to uh you know seem to have issues uh you know as i said you need a lamp stack or a wamp stop a wamp stack if you're on windows and you need to install you know php apache mysql you then need to configure the database all of that stuff which can be quite difficult now on their web page if you click on download uh they'll provide you with the actual b web application this is the php web application that again you simply just need to you know put it on apache and you pretty much are good to go but it's the initial setup process that i really don't like i'm a man of efficiency uh that's what i like and hopefully you know i can help you out here so you also have the ability to download be box which is a vm that has b web um already configured and running on it and you can use that if you want but as i said this is using a very old version of ubuntu so again it's entirely up to you now what i'm what i've done is i've set up a github repository on my github profile so it's called bwap docker i just set it up a couple of minutes ago and it essentially uh is a you know a docker docker file that allows you to you know simplify this process so let's take a look at the repo here uh as the title suggests this is a simple docker image for the osb web application designed to teach and demonstrate various web app vulnerabilities right so why did i create it because installing and configuring php php web apps can be quite time consuming as you need to install various packages like php apache etc etc so this docker image or this docker file will eliminate or automate this tedious process and will provide you with a click and run solution that will essentially provide you with a b web instance in a few seconds and in regards to using it you can clone the repository and build your own image it just takes a couple of seconds it's a few hundred megabytes to build it uh the only dependencies or one of the you know images that i used from docker hub was the uh lamp stack right and of course that's uh that makes a lot of sense and you then have the actual view application stored in a folder called app right and i've not modified that the only thing i've modified is just the config file so config.inc as you know in regards to the database connection and all the database credentials so you can clone the repository modify it as you want and then build the image i've already highlighted how you can you know pull the docker image as well as how you can run uh you know you can run the image or the container for that matter so i've already set up or i already have the docker image pushed to docker hub so you can just you know docker pull hack exploit uh b web docker and in my case i already have it on my kali linux system so you know we're pretty much good to go so again why did i set this up well because setting up another vm is really not resource efficient and a lot of you guys have actually pointed that out it's much better if you can have everything running on one system even if that system is a vm this docker container will not consume any resources or it will consume resources as required and it's much better than running a you know vm or hosting a separate system to host the application itself so we can again you can just copy the docker pull command here and as i said i already have it on my kali system so i can say docker images for example there we are docker images you can see it's about 441 megabytes which i think is fair but the actual download size is probably one or two hundred megabytes uh because it obvious uh one of the great things with docker hub is it actually compresses it so that's uh awesome so again to run it we simply say docker run and we're running it in detached mode obviously because we don't really want access to the container we're exposing port 80 on the container itself and port 80 on our local host or on your kali linux system right so let me just specify that correctly so 8080 and then i specify you know the actual image itself so hackersploit uh b docker there are no tags because i'm not going to be updating this so i can just hit enter it's going to say you know it's around that container so i can say docker psa you can see it's running and every we don't have any errors there so i can open up my browser here and i'll say 127.001 i'll hit enter don't worry if it gives you an error telling you that there's an unknown database called bwap one of the final steps that you need to perform yourself after running the container initially is you need to navigate to install.php so you hit enter it's going to say click here to install bwap and that's it b web has been installed successfully i can now log in with the default b b web credentials which are b and bug so i can say b and bug and you can then specify the security level this is something that we'll be playing around with so i can just say login and you can see that it works out of the box and the great thing with having this in the form of a docker container is you know when you're done or when you're not using it i can say you know docker container stop and i can specify the name of the um the name of the container there let me just get rid of the previous command that i copied so docker container stop uh specify the container name right give that a couple of seconds and again i'm not deleting the container because i want it to persist right and i don't want to have to run it again and then install it so that's one of the great things with containers so i can say docker psa you can now see it's um it's actually in an exited state so that means uh you know you can shut down your kali vm or your parrot os system and when you know you can restart it when you're back you can just you know resume from where you left off so you know i can say docker contain start and i can paste in the container name and i don't have to go through the installation process again so i can just reload that there we are so you know i can then specify the bug or the vulnerability that i would like to learn more about or that i would like to exploit so for example we'll be exploring http cookies and sessions in the next video within this series so you know we can take a look at cookies we have the http only cookies are secure so on and so forth so i can click on that i can set the security maybe to medium or high wherever i want it click on hack and you know this is one of the great things i like about bwap is it gives you you know very good uh you know it actually highlights or demonstrates how a particular vulnerability can be exploited and also from the perspective of a web app developer it gives them an idea of what uh they could improve in terms of their own application so it actually helps you understand where you might find vulnerabilities or where attackers could find vulnerabilities within your php based web application uh right so as i said we'll be using this for a few sections that actually require it so again we could also you know touch upon http verb dampering which is something we explored in the previous video uh you know of this um of this uh web app and testing series so again you can see it tells you you know essentially please change your password uh you know b and you know you can specify a new password and then intercept it with a proxy and see what's going on you guys get the idea right so that is how to set it up as i said the links to all of these to the github repository and the actual um docker hub page or repository will be in the description section i will probably be creating uh images for the other vulnerable web apps that we'll be using as i said we're starting off with this series you know in order to understand uh web you know web applications uh furthermore we're also getting an idea of how web applications can be exploited by exploring various vulnerabilities once we've got a grip once we complete once we're actually done with with this particular series we'll then move on to bug bounties right where we'll be taking a look at you know public programs and i'll also be sharing some of the uh the bug bounties that uh that i've actually you know the bounties that i've been able to get over the last couple of years and i'll try and replicate them to actually you know teach you a few things here and there so uh with that being said that's going to be it for this video if you have any questions suggestions leave them in the comment section if you know if you'd like to reach out to me you can do so via my twitter or via the discord server the the links to both of those are in the description section and i'll be seeing you in the next video a huge thank you to all of our patreons uh your support is greatly appreciated and this is a formal thank you so thank you shamir douglas ryan carr sandor michael busby sits up doozy defean barry dustin empress and michael hubbard your support is greatly appreciated and you keep us making even more high quality content for you guys so thank you [Music]