Post

Web Server Configuration

Manual on how to install the vulnerable web site in our Web Server

Now it’s time to set up our web server.

For this we will download an Ubuntu Server and set it up in a different subnet, an we will install the famous Juice Shop from OWASP in it which is a website with many known vulnerabilities in it so we can further practice our attacks and defenses.

I’ll not cover here how to install the Ubuntu Server, once we have it in a VM we will the proceed to install what we need for the website.

First we will head to the documentation:

[Juice Shop]https://github.com/juice-shop/juice-shop

Here we can find that we need to install node.js first, to install it we will use apt:

Node.js

If we want to make sure it’s installed we can use:

1
node-v

This will give us back the version of node installed.

After we have installed node.js we can then clone the repository with all the files needed to run the website, for that we will use git clone:

1
git clone https://github.com/juice-shop/juice-shop.git --depth 1

Download Juice Shop

Then we just need to go into the directory and install it with:

cd juice-shop

npm install

Install Juice Shop

After the installation is complete it will show us the amount of vulnerabilities in the website:

Vulnerabilities

After that we can just start our website with npm start :

NPM Start

We then will see that our website is running on port 3000.

We can go and check it out from our Windows 11 machine for example.

We will see that it already displays the website:

JuiceShop Website

This post is licensed under CC BY 4.0 by the author.