Video - Installing w3af in Kali Linux Using Docker

12 minutes
Share the link to this page
Copied
  Completed
You need to have access to the item to view this lesson.
One-time Fee
$99.99
List Price:  $139.99
You save:  $40
€92.26
List Price:  €129.17
You save:  €36.90
£78.58
List Price:  £110.02
You save:  £31.43
CA$136.53
List Price:  CA$191.15
You save:  CA$54.61
A$150.05
List Price:  A$210.08
You save:  A$60.02
S$134.83
List Price:  S$188.77
You save:  S$53.93
HK$780.51
List Price:  HK$1,092.75
You save:  HK$312.23
CHF 91.40
List Price:  CHF 127.97
You save:  CHF 36.56
NOK kr1,068.48
List Price:  NOK kr1,495.92
You save:  NOK kr427.43
DKK kr688.44
List Price:  DKK kr963.84
You save:  DKK kr275.40
NZ$163.35
List Price:  NZ$228.70
You save:  NZ$65.35
د.إ367.26
List Price:  د.إ514.18
You save:  د.إ146.92
৳11,721.12
List Price:  ৳16,410.04
You save:  ৳4,688.92
₹8,326.41
List Price:  ₹11,657.31
You save:  ₹3,330.90
RM469.20
List Price:  RM656.90
You save:  RM187.70
₦143,785.62
List Price:  ₦201,305.62
You save:  ₦57,520
₨27,847.71
List Price:  ₨38,987.91
You save:  ₨11,140.19
฿3,633.91
List Price:  ฿5,087.62
You save:  ฿1,453.71
₺3,217.97
List Price:  ₺4,505.29
You save:  ₺1,287.32
B$512.23
List Price:  B$717.15
You save:  B$204.91
R1,817.89
List Price:  R2,545.11
You save:  R727.22
Лв180.27
List Price:  Лв252.39
You save:  Лв72.11
₩136,618.14
List Price:  ₩191,270.87
You save:  ₩54,652.72
₪367.26
List Price:  ₪514.18
You save:  ₪146.92
₱5,803.01
List Price:  ₱8,124.45
You save:  ₱2,321.43
¥15,641.03
List Price:  ¥21,898.07
You save:  ¥6,257.04
MX$1,661.48
List Price:  MX$2,326.14
You save:  MX$664.66
QR364.73
List Price:  QR510.64
You save:  QR145.90
P1,348.30
List Price:  P1,887.68
You save:  P539.37
KSh13,198.68
List Price:  KSh18,478.68
You save:  KSh5,280
E£4,678.53
List Price:  E£6,550.13
You save:  E£1,871.60
ብር5,747.26
List Price:  ብር8,046.40
You save:  ብር2,299.13
Kz85,041.49
List Price:  Kz119,061.49
You save:  Kz34,020
CLP$88,840.11
List Price:  CLP$124,379.71
You save:  CLP$35,539.60
CN¥709.27
List Price:  CN¥993.01
You save:  CN¥283.74
RD$5,874.72
List Price:  RD$8,224.84
You save:  RD$2,350.12
DA13,454.48
List Price:  DA18,836.81
You save:  DA5,382.33
FJ$226.07
List Price:  FJ$316.51
You save:  FJ$90.44
Q776.68
List Price:  Q1,087.38
You save:  Q310.70
GY$20,942.51
List Price:  GY$29,320.35
You save:  GY$8,377.84
ISK kr13,848.61
List Price:  ISK kr19,388.61
You save:  ISK kr5,540
DH992.77
List Price:  DH1,389.92
You save:  DH397.15
L1,766.77
List Price:  L2,473.55
You save:  L706.77
ден5,684.23
List Price:  ден7,958.15
You save:  ден2,273.92
MOP$804.15
List Price:  MOP$1,125.85
You save:  MOP$321.69
N$1,813.62
List Price:  N$2,539.14
You save:  N$725.52
C$3,682.63
List Price:  C$5,155.83
You save:  C$1,473.20
रु13,330.40
List Price:  रु18,663.10
You save:  रु5,332.69
S/374.77
List Price:  S/524.70
You save:  S/149.92
K388.70
List Price:  K544.20
You save:  K155.49
SAR375.01
List Price:  SAR525.03
You save:  SAR150.02
ZK2,583.64
List Price:  ZK3,617.21
You save:  ZK1,033.56
L459.02
List Price:  L642.65
You save:  L183.62
Kč2,281.25
List Price:  Kč3,193.84
You save:  Kč912.59
Ft35,715.37
List Price:  Ft50,002.94
You save:  Ft14,287.57
SEK kr1,072.36
List Price:  SEK kr1,501.36
You save:  SEK kr428.99
ARS$88,916.93
List Price:  ARS$124,487.26
You save:  ARS$35,570.33
Bs691.33
List Price:  Bs967.89
You save:  Bs276.56
COP$382,975.61
List Price:  COP$536,181.17
You save:  COP$153,205.56
₡51,262.22
List Price:  ₡71,769.17
You save:  ₡20,506.94
L2,472.61
List Price:  L3,461.75
You save:  L989.14
₲751,156.78
List Price:  ₲1,051,649.55
You save:  ₲300,492.76
$U3,841.99
List Price:  $U5,378.94
You save:  $U1,536.95
zł393.60
List Price:  zł551.05
You save:  zł157.45
Already have an account? Log In

Transcript

Greetings and initial video presentation we're going to see how we go about installing the W three AF scanner in Kali Linux using Docker. using Docker, we will be able to install the W three AF scanner and all of its dependencies without having to install any other dependencies onto our Kali machine. Docker is a computer program that performs operating system level virtualization, also known as containerization. It was first released in 2013 and is developed by Docker Incorporated. Docker is used to run software packages called containers. In a typical example, use case one container runs a web server and web applications.

While a second container runs a database server that is used by the web applications. Containers are isolated from each other and use their own set of tools and libraries. They can communicate through well defined channels. All containers use the same kernel and are therefore more lightweight than virtual machines. Containers are created from images which specify their precise contents. Images are often created by combining and modifying standard images downloaded from repositories.

This lab requires one virtual install of Kali Linux, that has been fully updated, and a good internet connection. Before we begin the actual lab, let's go ahead and ensure that our Kali has been fully updated. To do this, I'm going to use the app command app space, get space puppy, I'm going to hit enter. If you get an error stating you have an invalid signature, go ahead and run the following command from the lab. That's the W get space dash q space dash capital O, and we're going to go ahead and get ourselves a new signature key. Go and hit enter.

Give it a second comes back and says it's okay. Once you've updated your signature key, go ahead and run the update one more time. While Kelly's upgrading, we'd go ahead and open up a new terminal. And we're going to prepare a script file that's going to do all the heavy lifting for us. Using nano, we're going to create a new Docker underscore install.sh script that's going to run through the installation of Docker for us. So I've typed in nano, and I'm going to open up a blank file and this file is going to be named Dr. underscore install.sh.

There's my blank file. Now I'm going to go back over to my lab file and I'm going to copy and paste from the lab file, the text that is in between the lines for this particular script, come back over to my blank text file, and I'm just going to paste this in. Now what I'm going to do is I'm going to save this, it's going to be saved to my root folder so that I will know where to find it. So I'm going to go ahead and hit Ctrl x, I'm gonna say y or type in y For Yes, and then I'm going to hit enter, we can now do an ls, and we'll find that the file has been saved to my root folder. I'm now going to make this Docker underscore install.sh file executable. Under the change mode command I've typed in ch mo D space, the plus sign plus a small letter X space Docker underscore installed.sh.

I'm going to go ahead and hit enter and it comes back to the prompt letting me know that the command completed successfully. This command has now made this file this text file executable and if we do another LS, we'll be able to see that the color of the file has changed from white to green, indicating that it is now executable. Kali has completed updating I'm going to go ahead and close out that terminal return to my Second terminal where I created this Docker underscore install.sh script. We're now ready to run the script. Now I'm going to type in sh. And what I'm going to do is I'm just going to copy from the LS results, the name of the file, name of the script.

And I'm just going to copy and paste that into the terminal prompt. I'm not going to hit Enter. And this again is going to run through the script and part of that script is to run an update. But we've already done that. We're now installing the Docker program, and all of the files that it needs. And when we're done here, we'll be able to download the container that contains the W three AF scanner.

The script will install all the dependencies and everything that the Docker program needs to run on this Kali installation. Once the script does complete, the Docker program has been installed. Now if you look up just a little bit inside of the results inside of the terminal, you'll see that there is a Hello from Docker, that this was done inside of the script. And what it does is it goes out and it confirms that the Docker program is working. So the command that we would normally run if we were doing this manually would be Docker space run hello world. And we can run that command right here from the terminal.

I'm gonna go ahead and copy and paste that in from the lab. So it's Docker space run hello world. And this is going to go out and it's going to communicate with the Docker site. And I'm going to go ahead and type that in, and it comes back and it says hello from Docker. This message shows that your installation appears to be working correctly. We next need to download the W three AF package from GitHub.

So I've typed in get space clone. Now copy this command over from the lab file. Now once the W three AF package has completed itself stalling from the GitHub, we can then look inside of our root folder to see if it is present. So I've typed in LS at the prompt, and we see that the W three AF directory is in place. We're now ready to change directory over to the W three AF folder. And we're going to be working inside there, modifying a couple of items.

But first, we have to get there. To do this, we're going to type in cd space, W three A f four slash extras for slash Docker for slash scripts. And there's a script that we're going to be using to install the W f container at this location. So I'm going to go ahead and change on over to my new location. And we're going to begin work inside of here, up inside of this scripts directory up inside of the W three AF directory. We're going to run a script That's going to begin the installation of the actual container for W three, a EP that we can run inside of the Docker program.

To do this, I've typed in sudo, which was not needed because I'm already root, but I've gotten used to just type in sudo space, period forward slash w three AF underscore console underscore Docker. Well, let's see what happens. I'm going to go ahead and hit enter. So we're now downloading everything we need for the W three AF container that's going to be working inside of the Docker program. So this is where we run into a problem with this Docker script that's present up inside of the W three a directory, it wants a password for this address. We're going to have to go in we're going to have to modify the Docker underscore helpers dot p y script file.

And what we're going to do is just change the permissions so that we don't get printed prompted for a password. So let's see how we do that. First thing I'm going to do is just hit enter a couple times here, that's going to come back over to the prompt. Now we're going to go ahead and we're going to go find this Docker underscore helpers dot php script. And I do this, we're going to have to change directory over to the common directory that's also located inside the W three folder. So I'm going to type in LS.

And let's see what's present up inside of here. And you'll see that there is a common directory that is present. So I'm going to change directory on over to this location. Now I'm going to go ahead and get a hold of this Docker helpers, Docker underscore helpers got p y script file. So I'm gonna do another LS, and we see that there is a Dockers underscore helpers.py file that is present. Now we're going to open this up with a text editor.

And we're going to modify the change mode permissions. And what it is, there is an error in the way that they put in the permissions, they should have used an octal. But instead they use the decimal. So we're going to go ahead and take a look at this. So what I'm going to do now is I'm going to get up inside of here using nano, and I'm going to modify the script real quick. So I'm going to type in nano space, Docker underscore helpers dot p y.

And now we're inside of the file that needs to be modified. This is a rather large file and I don't want to spend a lot of time looking at 164 different lines, looking for this particular line that I have to modify. So I'm going to use this w switch in here. And I'm just going to type I'm just going to press the Ctrl key plus W. And using the search feature, I'm just going to copy and paste the variable that I'm looking for inside of this script. Now actually copied this from the lab. And that's where you're going to find it as well.

And it comes right up and it shows me exactly where the line is that I need to modify. So what I'm going to do is I'm going to add a zero in front of this six, and that's going to make it octal as opposed to being decimal. So let me just go ahead and scoot on over here using my arrow. And I'm going to add in as zero, and gold one more to the right, and I'm going to push that back to the left. He's my arrow keys, and now we have the correct set of permission, we can go ahead and save our changes by typing in Ctrl x. If it asks you if you want to, say the modified buffer, type in Y for yes, and then hit enter, I now have to return back to my Scripts folder so that I can run that Docker underscore command one more time.

So what I'm going to do is I'm gonna type in cd space, period period, that's gonna take me back one level. Now I'm back to the Scripts folder. Now I'm going to use my up arrow. And I'm going to bring back that command that sudo command to run the script one more time, and we should not be prompted for any password. Let's go and see if that works. And with the modification of our Dockers underscore helpers.py script, we are now able to launch the W three A f scanner.

So I'm going to go ahead and type in y to accept the terms and conditions of using the scanner, hit Enter. And you'll notice that we do now have they prompt for the W three a vulnerability scanner for websites. So in conclusion, for this particular video tutorial, you got to see how we can get around the issue of not having all the dependencies available when we want to install something as simple as the W three a vulnerability scanner. What We can do is we can get a package, either from the software creator or from GitHub that somebody else has created. And using the Docker container that we downloaded, we were able to install this w three A f scanner without having to worry about installing or finding or locating or having the required dependencies. They're all inside of the container, and Kali could care less.

Okay, well that's going to conclude this short video presentation on how to go about installing the W three AF scanner using Docker. Now if you have any questions or you have any concerns, please don't hesitate to reach out and contact your instructor and I'll see you in my next video.

Sign Up

Share

Share with friends, get 20% off
Invite your friends to LearnDesk learning marketplace. For each purchase they make, you get 20% off (upto $10) on your next purchase.