docker配置sqli-labs

想开始sqli-labs，结果phpstudy环境下配置的有些关卡根本没有预计的报错回显，于是学习一下用docker配置sqli-labs

环境：Ubuntu 16.04

换源（阿里源）

修改 /etc/apt/sources.list文件

1	sudo gedit /etc/apt/sources.list

删除该文件的全部内容，并将以下内容复制进去

# deb cdrom:[Ubuntu 16.04 LTS _Xenial Xerus_ - Release amd64 (20160420.1)]/ xenial main restricted
deb-src http://archive.ubuntu.com/ubuntu xenial main restricted #Added by software-properties
deb http://mirrors.aliyun.com/ubuntu/ xenial main restricted
deb-src http://mirrors.aliyun.com/ubuntu/ xenial main restricted multiverse universe #Added by software-properties
deb http://mirrors.aliyun.com/ubuntu/ xenial-updates main restricted
deb-src http://mirrors.aliyun.com/ubuntu/ xenial-updates main restricted multiverse universe #Added by software-properties
deb http://mirrors.aliyun.com/ubuntu/ xenial universe
deb http://mirrors.aliyun.com/ubuntu/ xenial-updates universe
deb http://mirrors.aliyun.com/ubuntu/ xenial multiverse
deb http://mirrors.aliyun.com/ubuntu/ xenial-updates multiverse
deb http://mirrors.aliyun.com/ubuntu/ xenial-backports main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ xenial-backports main restricted universe multiverse #Added by software-properties
deb http://archive.canonical.com/ubuntu xenial partner
deb-src http://archive.canonical.com/ubuntu xenial partner
deb http://mirrors.aliyun.com/ubuntu/ xenial-security main restricted
deb-src http://mirrors.aliyun.com/ubuntu/ xenial-security main restricted multiverse universe #Added by software-properties
deb http://mirrors.aliyun.com/ubuntu/ xenial-security universe
deb http://mirrors.aliyun.com/ubuntu/ xenial-security multiverse
deb [arch=amd64] https://download.docker.com/linux/ubuntu xenial stable
# deb-src [arch=amd64] https://download.docker.com/linux/ubuntu xenial stable

更新生效

1	sudo apt-get update

安装docker

由于apt官方库里的docker版本可能比较旧，所以先卸载可能存在的旧版本

1	sudo apt-get remove docker docker-engine docker-ce docker.io

更新apt包索引

1	sudo apt-get update

安装以下包以使apt可以通过HTTPS使用存储库（repository）

1	sudo apt-get install -y apt-transport-https ca-certificates curl software-properties-common

添加Docker官方的GPG密钥

1	curl -fsSL https://download.docker.com/linux/ubuntu/gpg \| sudo apt-key add -

使用下面的命令来设置stable存储库

1	sudo add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable"

更新apt包索引

1	sudo apt-get update

安装最新版本的Docker CE

1	sudo apt-get install docker-ce docker-ce-cli containerd.io

配置sqli-labs

搜索镜像

1	sudo docker search sqli-labs

拉取镜像到本地

1	sudo docker pull acgpiano/sqli-labs

运行

1	sudo docker run -dt --name sqli -p 80:80 --rm acgpiano/sqli-labs

linux环境下安装burp

配置java环境

1 2	sudo apt install openjdk-8-jdk-headless sudo apt install openjdk-8-jre-headless

下载burp

1	wget http://labfile.oss.aliyuncs.com/courses/726/burpsuite_free.jar

运行burp

1	/usr/bin/java -Xmx2g -jar burpsuite_free.jar

docker配置upload-labs

设置国内阿里云的镜像加速器

需要修改配置文件vim /etc/docker/daemon.json（改文件需要新创建）添加内容如下：

1
2
3

{ 
"registry-mirrors": ["https://alzgoonw.mirror.aliyuncs.com"] 
}

配置文件daemmon,json添加阿里云镜像地址，保存并退出

重启docker服务

1 2	#systemctl restart docker #sudo systemctl status docker

创建镜像

1	suds docker pull c0ny1/upload-labs

创建容器

1	sudo docker run -dt --name upload -p 7777:80 --rm c0ny1/upload-labs

访问页面

LAMP环境配置

环境：Ubuntu 16.04

好像一直用的系统因为docker的原因，搭lamp环境一直出问题，所以重新换了一个系统，搭成功了

安装apache2

1	sudo apt-get install apache2

安装php7.0

1	sudo apt-get install php7.0

安装php7.0插件

1 2	apt-cache search libapache2-mod-php sudo apt-get install libapache2-mod-php7.0

新建一个php文件测试

1	sudo gedit /var/www/html/phpinfo.php

内容为

1
2
3

<?php
	echo phpinfo();
?>

保存退出

访问localhost/phpinfo.php

安装mysql

1	sudo apt-get install mysql-server mysql-client

安装mysql插件

1 2	sudo apt-get install php7.0-mysql sudo apt-get install php7.0-gd php7.0-mbstring php7.0-xml