How to install DVWA in Kali 2016.1

Tested 15 September 2016

First, download Kali 2016.1 from:
https://www.offensive-security.com/kali-linux-vmware-virtualbox-image-download/

Then run the following commands:
apt-get clean
apt-get update
apt-get install apache2 mysql-server php5 php5-mysql php-gd

service apache start
service mysql start

Then obtain and prepare DVWA:
Download DVWA-1.9.zip from www.dvwa.co.uk
unzip DVWA-1.9.zip

cd /var/www/html
cp -R ~/Downloads/DVWA-1.9/* ./

nano config/config.inc.php

Set blank password at:
$_DVWA[ 'db_password' ] = '';

Browse to:
http://localhost/setup.php

Click Create / Reset Database.

Yes I'm aware that it says:
PHP module php-gd: Missing

This is for the CAPTCHA. You don't need this unless you've enabled CAPTCHA, and is trying to break it.


One item you may want to fix is:
PHP function allow_url_include: Disabled

Because you will otherwise not be able to perform most traditional RFI (Remote File Inclusion) attacks.

You'll need to edit this file:
/etc/php5/apache2/php.ini