Getting ready
OWASP BWA doesn't yet include an application that uses WebSockets, so we will need to use Damn Vulnerable Web Sockets (DVWS) (https://www.owasp.org/index.php/OWASP_Damn_Vulnerable_Web_Sockets_(DVWS)), also from OWASP, for this recipe.
DVWS is a PHP-based open source application; download it into your Kali VM from its GitHub repository: https://github.com/interference-security/DVWS/.
In ideal conditions, we would only need to download the application, copy it to the Apache root directory, and start the services to have it running, but unfortunately for us, this is not the case in Kali Linux.
First, you need to install the php-mysqli package using apt install php-mysqli. Pay attention to the PHP version it is for; in our case ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access