In the last post I described VMware host-only networking and
the IP address’s to be assigned to each guest in the WAPT. This post will cover
setting up the Samurai WTF and OWASP Broken Web Application VM’s. Since the
Hacme VM will require an OS install, it will be covered in the next post.
First we must download the VM’s. Click the following links
to download the VM’s:
Once the VM’s have downloaded copy the download files to the
portable hard drive.
Samurai WTF is a Ubuntu based Linux distribution project
focused on Web Application Testing, originally written by Kevin Johnson
(securideas). At this time, the current version is 0.9.9, with version 2.0 in
release candidate state.
Samurai WTF version 0.9.9 is an iso image. You can download
the ISO from sourceforge.
Once the ISO is downloaded, create a new VM using VMware virtualization
software. Each VMware product has minor differences, but select the hardware
options (memory, processor, storage, etc.) based on the resources in the
system(s) this will be used on.
Samurai WTF version 2.0 is an iso image as well. You can download the
zip file from sourceforge. Once the ISO is downloaded, create a new VM using VMware virtualization software. Each VMware product has minor differences, but select the hardware options (memory, processor, storage, etc.) based on the resources in the system(s) this will be used on.
Once Samurai is started, login, click here for the username and password. After login set the IP address to
172.16.254.250. For reference on setting static IP address in Ubuntu based
Samurai, click here.
With Samurai setup, next set up OWASP Broken Web
Applications (OBWA). You can downloaded the latest version here. Once the download is complete, extract the file to the portable hard drive.
Using VMware, either import or open, depending on the VMware version being
used, to use the prebuilt VM.
Once OBWA is started, login using root:owaspbwa. After login
set the IP address to 172.16.254.200. OBWA is Ubuntu based, so setting the IP
address is identical to setting the IP for Samurai.
With the IP’s set, a quick ping to Samurai and OBWA from
each system will ensure that networking is set up on both hosts.
In the next post, I will discussing building the Hacme host.
The Hacme host will have Windows XP SP 3 as the installed OS. I will cover installing Hacme Bank, Hacme
Books, Hacme Casino, Hacme Shipping, and Hacme Travel.
