Setting Up

Trước khi xem log (Hãy cài đặt)

# Apache2

sudo tail -n 50 /var/log/apache2/error.log
sudo tail -n 50 /var/log/apache2/access.log
# Mail server
tail -f /var/log/mail.log
mail

Installing bWAPP on Kali Linux & Ubuntu

Download bWAPP from the Official Website

1. Go to bWAPP download page.

2. Click on "You can download bWAPP from here" to go to the download server.

3. Click on "Download Latest Version".

Update Your System

sudo apt-get update -y

Prepare the Environment

unzip bWAPPv2.2.zip -d bWAPP

cd bWAPP

Install MySQL

1. Check if MySQL is installed:

   mysql -V

2. Update the system before installation:

   sudo apt-get update -y

3. Install MySQL if not installed:

   sudo apt install mysql-server

4. Start MySQL:

   sudo systemctl start mysql

5. Enable MySQL on startup:

   sudo systemctl enable mysql

6. Check MySQL status:

   sudo systemctl status mysql

   Press Q to exit.

Install Apache2

1. Check if Apache2 is installed:

   apache2 -v

2. Update the system before installation:

   sudo apt-get update -y

3. Install Apache2 if not installed:

   sudo apt install apache2 libapache2-mod-php8.3 php8.3-mysql -y
   php -m | grep mysqli        # phải thấy 'mysqli'

4. Start Apache2:

   sudo systemctl start apache2

5. Enable Apache2 on startup:

   sudo systemctl enable apache2

6. Check Apache2 status:

   sudo systemctl status apache2

   Press Q to exit.

Prepare bWAPP

1. Navigate to the bWAPP directory:

   cd bWAPP

2. Give all permissions to these directories:

   chmod 777 passwords/
   chmod 777 images/
   chmod 777 documents/

Configure MySQL

1. Open MySQL to add a user and give privileges:

   sudo mysql

2. Create a user (replace ahmed and pass123 with your desired username and password):

   CREATE USER 'bee'@'localhost' IDENTIFIED BY 'bug';

3. Grant privileges to the user you created:

   GRANT ALL PRIVILEGES ON bWAPP.* TO 'bee'@'localhost';

4. Apply the changes immediately:

   FLUSH PRIVILEGES;

5. Exit MySQL:

   exit

Edit bWAPP Database Credentials

1. Edit the settings.php file:

   code admin/settings.php

2. Change root to the same username you created in MySQL:

   $db_username = "bee";

3. Add the same password you created in MySQL:

   $db_password = "bug";

4. Save changes (Ctrl + S), and close the file.

Important Step

1. Go to this link and copy the content (Ctrl + C).

2. Edit install.php:

   code install.php

3. Select all (Ctrl + A), paste the copied content (Ctrl + V), save changes (Ctrl + S), and close the file.

Move bWAPP Files to Local Server

1. Navigate to the parent directory:

   cd ../

2. Move all bWAPP files to the local server:

   sudo mv * /var/www/html/
   sudo chown -R www-data:www-data /var/www/html/
   sudo chmod -R 755 /var/www/html/

Install bWAPP Database

1. Open the following link in your browser and click to install the database: http://localhost/bWAPP/install.php

Verify Database Installation

1. Open MySQL to check if the database has been added:

   sudo mysql

2. Show databases:

   SHOW DATABASES;

3. Exit MySQL:

   exit

4. 

Login to bWAPP

1. Go to http://localhost/bWAPP/

2. Login credentials:

   • Username: bee

   • Password: bug

Installing mail server

sudo apt update && sudo apt upgrade -y
sudo apt install postfix mailutils dovecot-common -y

sudo dpkg-reconfigure postfix

Màn hình	Giá trị khuyến nghị
General type	Internet Site
System mail name	bwapp.local hoặc mailinator.com (theo bwapp) nếu sử dụng domain khác thì phải tạo mới user riêng trên bWAPP tại http://192.168.160.133/bWAPP/user_extra.php
Root & postmaster recipient	bee (hoặc user bạn hay dùng)
Other destinations (mydestination)	bwapp.local, localhost.localdomain, localhost
Force synchronous updates	No
Local networks (mynetworks)	127.0.0.0/8 192.168.160.0/24
Mailbox size limit	0
Recipient delimiter	+
Internet protocols	all

Hoặc có thể copy file sau vào /etc/postfix/main.cf

# See /usr/share/postfix/main.cf.dist for a commented, more complete version


# Debian specific:  Specifying a file name will cause the first
# line of that file to be used as the name.  The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname

smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

readme_directory = no

# See http://www.postfix.org/COMPATIBILITY_README.html -- default to 3.6 on
# fresh installs.
compatibility_level = 3.6



# TLS parameters
smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
smtpd_tls_security_level=may

smtp_tls_CApath=/etc/ssl/certs
smtp_tls_security_level=may
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache


smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination
myhostname = pwn.localdomain
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
mydestination = bwapp.local, localhost.localdomain, localhost
relayhost = 
mynetworks = 127.0.0.0/8 192.168.160.0/24
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
inet_protocols = all
myorigin = /etc/mailname
home_mailbox = 

sudo systemctl restart postfix
sudo postqueue -f

sudo ufw allow from 192.168.160.0/24 to any port 25 proto tcp
sudo ufw reload

# Gửi thư từ chính máy
echo "Hello lab" | mail -s "First test" [e-mail]

Cấu hình cuối cùng cho mail server để có thể sử dụng nhiều user ảo trên 1 domain

sudo nano /etc/postfix/virtual
cat /etc/postfix/virtual 
sudo postmap /etc/postfix/virtual
sudo postconf -e "virtual_alias_maps = hash:/etc/postfix/virtual"
sudo systemctl reload postfix
sudo postqueue -f

Credential

Web: bee - bug

DB: bee - bug

User entry: [e-mail] - 123