Skip to content

Commit

Permalink
modified
Browse files Browse the repository at this point in the history
  • Loading branch information
0c34 committed Sep 9, 2020
1 parent 43f241c commit dbf4fe5
Showing 1 changed file with 14 additions and 22 deletions.
36 changes: 14 additions & 22 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,15 +5,12 @@ GoVWA (Go Vulnerable Web Application) is a golang web application which contain
---
GoVWA is a vulnerable web application, **run the application on your local or testing environment only**

#### How To Install GoVWA
#### Installisation
---
#### Installing golang
If you didn't have golang installed on your system. first, install it using automation script from https://github.com/canha/golang-tools-install-script.

Follow the instruction which is provided by the author and install golang depending on your Operating System Architecture.

If successfully installed you would have directory 'go' in your home directory. the go directory has three subdirectory (bin, pgk, src). switch to src directory then clone govwa repository.
#### Install golang
Install golang on you host

#### Install from source
```
git clone https://github.com/0c34/govwa.git
Expand All @@ -22,16 +19,14 @@ git pull (to update)
```
we have to install several golang package that required by govwa

Execute those command in your terminal
Install dependency packages
```
go get github.com/go-sql-driver/mysql
go get github.com/gorilla/sessions
go get github.com/julienschmidt/httprouter
go mod download
```

#### GoVWA config
---
Open the file config.json which is located in config directory. Change the configuration according to your needs.
Modified the config.json file for database configuration

```
{
Expand All @@ -40,16 +35,16 @@ Open the file config.json which is located in config directory. Change the confi
"dbname": "govwa",
"sqlhost": "localhost",
"sqlport": "3306",
"webserver": "http://192.168.56.101",
"webport": "8082",
"webserver": "http://localhost",
"webport": "8888",
"sessionkey:": "G0Vw444"
}
```
Run GoVWA
```
govwa@ubuntu-server:~/go/src/govwa$ go run app.go
go run app.go
```
```
Expand All @@ -61,8 +56,8 @@ govwa@ubuntu-server:~/go/src/govwa$ go run app.go
°°ÛÛÛ °°ÛÛÛ °ÛÛÛ °ÛÛÛ °°°ÛÛÛÛÛ° °°°ÛÛÛÛÛ°ÛÛÛÛÛ° °ÛÛÛ °ÛÛÛ
°°ÛÛÛÛÛÛÛÛÛ °°ÛÛÛÛÛÛ °°ÛÛÛ °°ÛÛÛ °°ÛÛÛ ÛÛÛÛÛ ÛÛÛÛÛ
°°°°°°°°° °°°°°° °°° °°° °°° °°°°° °°°°°
Server running at port :8082
Open this url http://192.168.56.101:8082/ on your browser to access GoVWA
Server running at port :888
Open this url http://localhost:8888/ on your browser to access GoVWA
```
Open the url to access GoVWA and follow the setup instruction to create database and tables
Expand All @@ -83,12 +78,9 @@ Explore the vulnerability.

#### To Do

* ~~XXE Vulnerability~~
* NoSQLInjection
* Json Web API (unprotected API)
* Build Simple Android APP
* add more vulnerabilities

warm regards [NemoSecurity](https://nemosecurity.com)
Powered by [NemoSecurity](https://nemosecurity.com)



Expand Down

0 comments on commit dbf4fe5

Please sign in to comment.