(W41M01) Setting-Up the Environment

Download the following tools on your Windows OS:

• Eclipse IDE (install Spring Tools from eclipse market place)
• POSTMAN
• OWASP ZAP
• WAMP
• DVWA (Since it is a vulnerable app, do not upload it on any Internet facing servers)

Installing DVWA with WAMP

1. Download DVWA
2. Extract the content of the DVWA Package
3. Copy the Files of DVWA Package and paste it in www folder under your installation path of WAMP, which is usually “C:\wamp\www\dvwa” (dvwa folder is created in www, you can create with any name)
4. Configure DVWA setup. Open Config folder at “C:\wamp\www\dvwa\config”
5. Edit config.inc file and verify the following:

• • our database name (use any name you want: I use DVWA)
  • database host/server is localhost, i.e.: 127.0.0.1
  • database user is root (this is Default database user)
  • password is blank; that is, erase everything between '' (quotes)
  • save the file and proceed.

6. Open Browser (assumed WAMP server already running)

7. Type the following address: localhost/dvwa/setup.php

8. Click on create Database

9. To Login and start using DVWA Lab:

1. open localhost/dvwa/
2. default login is:

• • • username — admin
    • password—- password

Alternative approach to use DVWA as Docker image

To run this image, you need docker installed. Run the following command:

docker run --rm -it -p 80:80 vulnerables/web-dvwa

After the docker image is installed, follow from Step 7.

Additional Learning Material

• Talks and videos on Spring Boot for reference: https://spring.io/projects/spring-boot
• What is REST API:  https://medium.com/@lazlojuly/what-is-a-restful-api-fabb8dc2afeb
• What is Secure Software Development Lifecycle:

https://medium.com/@chillspike/stages-of-a-secure-software-development-lifecycle-6582481bfe33