In this video we are going to cover how to set up a vulnerable
web application on our Kali
launch machine that we can simply use for webpage on
testing. So let's dive on in.
So firstly let's open our virtualbox.
And here we have our Carly Lux, which one machine
Let's power it on.
Remember to login with a username was Kali and the
password that you have set in one of
the previous videos.
Great. So now that we are logged in.
Let's ensure that we have interconnectivity.
so you can open our terminal like so
let's ping Google.
As you can see we are able to perform DNS resolution.
So we know DNS is working perfectly and we
are able to connect to the actual web server out on
the internet.
The first thing we want to do is to download the pgp
keys for docker.
So you can simply use this command.
It's quite likely so I highly recommend that you
pause the video and type all this entire command
as it is. It's a single line of command and then
hit enter.
Next you will ask to verify your credentials simply
enter your password and that's pretty
much it.
The second thing we need to do is we need to configure the
docker EBT repositories on
our Kali Linux machine as well.
To do this. We have another very long command
to use.
Simply pause the recording type all the entire command
as it is and hit enter.
Once you enter it should be completed within a few seconds.
Next let us update our internal source
repositories. So let's do sudo update
like so this should
take a few seconds to Pops a few minutes to complete.
Okay, great. So now that's completed.
The next step is we need to install the
docker Community Edition the Community
Edition command line and the containerization
feature for docker.
So you can use this command sudo EBT install
dash wi-fi. Yes docker-c dockerdash
c - CLI and
containerd.io and it enter
If you are asked to confirm simply
type Y and hit enter, but it's
automated.
Great. So now the installation is finished.
The last thing we need to do is to actually
download the juice box Docker
image onto a Docker container on
our Kali lungs machine.
To do this simply use a pseudo Docker pull
and that command here and hit enter.
This should take a few seconds to complete once it's
completed the last last thing we need to do.
Is to create a port well
to open a logical port on the
docker container so that we can connect to
the actual juice box or the
Juice Shop application.
Great. So now we can see it's downloaded
perfectly. The last thing we want to do now is use
this command, which is Docker run it
specifies the Rhonda.
Container in the background and we'll
be connected from our Port 3000 to
Port 3000 on the container. So let's
hit enter.
And once everything seems to be satisfied. We'll see
the surveys listing on Port 3000.
Great. So Wireless is running. Let's open
our web browser on Kali Linux.
like so
and what we can do now is type HTTP colon
slash slash.
localhost like so and
we are going to specify a socket of 3,000
like so
and there we go. We have our Juice Shop
running.
On our Kali lungs machine. So therefore we don't
ever need to actually, you know
do science any sort of security testing on web applications
that are not owned by us. We have
a very own vulnerable web application running
on our cardiologics machine.
Now, let's say that your finish using wasp. What could
you do? Well, we could simply close a browser and press
control and Q to actually quit
the application.
If contract you doesn't work simply type Q and hit
enter if that doesn't work then control Z
who control X or one of
these will definitely week.
So pretty much that's it for
this video.
In this video you have learned how to set up the oras
Juice Shop vulnerable web application on Kali
Linux.
In the next video, we'll discuss on how to set up a vulnerable
wireless network that will be used to
demonstrate a wireless penetration testing in the
latest sections of this course. I hope this video was informative for
you and I will see you in the next one.