ubuntu下sqli-labs靶场搭建

靶场搭建在ubuntu20.04下

sqli-labs项目地址 https://github.com/Audi-1/sqli-labs

因sqli-labs只支持PHP5，而我使用的ubuntu20.04只支持PHP7以上版本，所以我使用了另一个项目sqli-labs-php7 https://github.com/skyblueee/sqli-labs-php7

克隆项目

克隆项目到目录/var/www/html下

sudo git clone https://github.com/skyblueee/sqli-labs-php7 /var/www/html

安装软件

通过apt安装需要的软件

sudo apt install php php-fpm php-mysql mysql-server nginx

注意，一定要安装php-mysql

启动相关的服务

sudo systemctl restart php7.4-fpm mysql nginx

配置MySQL Server

以root身份登录MySQL Server

sudo mysql

创建名为sqli_labs_php7密码为sqli_labs_php7_test的用户，并为用户sqli_labs@127.0.0.1赋予除grant权限外的所有权限

create user 'sqli_labs_php7'@'127.0.0.1' identified by 'sqli_labs_php7_test';
grant all privileges on *.* to 'sqli_labs_php7'@'127.0.0.1';

配置nginx

删除文件/etc/nginx/sites-enabled/default

sudo rm /etc/nginx/sites-enabled/default

创建文件/etc/nginx/sites-enabled/sqli_labs_php7.conf，并写入如下内容

server {
    listen 8080 default_server;
    server_name _;
    root /var/www/html/sqli-labs-php7;
    index index.html index.php;
    location / {
        try_files $uri $uri/ =404;
    }
    location ~ \.php$ {
        include snippets/fastcgi-php.conf
        fastcgi_pass unix:/var/run/php/php7.4-fpm.sock;
    }
}

重启nginx

sudo systemctl restart nginx

配置sqli-labs-php7

修改/var/www/html/sqli-labs-php7/sql-connections/db-creds.inc，将其中的dbuser和dbpass改为sqli_labs_php7和sqli-labs_php7_test

初始化数据库

通过浏览器访问http://你的虚拟机IP:8080/index.html

点击Set/reset Database for labs进行数据库初始化

至此，sqli-labs-php7靶场搭建完毕，enjoy~