burp suit 4 multillidae

download multillidae @ https://github.com/webpwnized/mutillidae

#terminal

#install dependency

php -version                                                               

PHP 7.4.21 

sudo apt-get install php7.4-curl php7.4-mbstring php7.4-xml 

sudo service mysql start  

#login as root

sudo mysql -u root 

#create super user for new database

MariaDB [(none)]> CREATE USER 'dvwa'@'localhost' IDENTIFIED BY 'p@ssw0rd'; 

#grant user privilage

MariaDB [(none)]> GRANT ALL PRIVILEGES ON * . * TO 'dvwa'@'localhost';

#switch user to dvwa

MariaDB [(none)]> system mysql -u dvwa -p

#test dvwa has access to database

MariaDB [(none)]> create database a;

Query OK, 1 row affected (0.001 sec)

MariaDB [(none)]> drop database a;

Query OK, 0 rows affected (0.001 sec)

change username, password in includes/database-config

#start server

cd Downloads/mutillidae-master

php -S 127.0.0.1:80 -t .

click setup database

website is running on server

#open dbeaver

dbeaver &

database is created

reference:

http://knoxd3.blogspot.com/2014/05/how-to-install-mutillidae-in-kali-linux.html

https://www.youtube.com/watch?v=TcgeRab7ayM

https://chuanshuoge3.blogspot.com/2021/12/burp-suit-2.html

mysql switch user & grant privilege 

https://stackoverflow.com/questions/22811829/how-to-switch-users-on-mysql

https://askubuntu.com/questions/461064/unable-to-create-database-due-access-denied