search

digininja / DVWA

Damn Vulnerable Web Application (DVWA)
GNU General Public License v3.0
9.98k stars 3.44k forks source link

DVWA System error - config file not found. #651

Open ggkkaa opened 3 weeks ago

ggkkaa commented 3 weeks ago

Describe the bug Web application returns "DVWA System error - config file not found" when I have changed config.inc.php.dist to config.inc.php

To Reproduce Windows 11, on Burp Suite Community Version. Change config.inc.php.dist to config.inc.php

Steps to reproduce the behaviour:

  1. Seup a dvwa server using XAMPP
  2. Copy config.inc.php.dist to config.inc.php
  3. Open site using Burp Suite Community Edition

Logs Which log? Access, error, or PHP error? I will post the error one [Thu Aug 22 00:24:48.452353 2024] [mpm_winnt:notice] [pid 30008:tid 404] AH00354: Child: Starting 150 worker threads. [Thu Aug 22 00:33:00.734277 2024] [core:error] [pid 30008:tid 1932] (20024)The given path is misformatted or contained invalid characters: [client 127.0.0.1:61094] AH00127: Cannot map GET /DVWA:3306 HTTP/1.1 to file [Thu Aug 22 00:33:04.489476 2024] [core:error] [pid 30008:tid 1932] (20024)The given path is misformatted or contained invalid characters: [client 127.0.0.1:61094] AH00127: Cannot map GET /DVWA:3306 HTTP/1.1 to file [Thu Aug 22 00:33:05.108606 2024] [core:error] [pid 30008:tid 1932] (20024)The given path is misformatted or contained invalid characters: [client 127.0.0.1:61094] AH00127: Cannot map GET /DVWA:3306 HTTP/1.1 to file [Thu Aug 22 00:33:05.366687 2024] [core:error] [pid 30008:tid 1932] (20024)The given path is misformatted or contained invalid characters: [client 127.0.0.1:61094] AH00127: Cannot map GET /DVWA:3306 HTTP/1.1 to file

Expected behaviour The site to open and work as usually

What have you done to help fix the issue yourself? I have changed the config and tried to look at a closed issue about this error.

Screenshots image image

System (please complete the following information):

digininja commented 3 weeks ago

I can't see your images as they are private.

Can you show a command line directory listing of the config directory to prove the file is there.

Looking at the log, why are you trying to access the site on port 3306?

ggkkaa commented 2 weeks ago

It is there, int my image, but OK I will show a command line directory. Id on't know, It's set up that way, I just went on my server andaccesed it as localhost/dvwa.

cmd listing:

PS C:\xampp\DVWA\config> Tree /F /A Folder PATH listing for volume OS Volume serial number is 2C23-00AC C:. config.inc.php config.inc.php.dist

No subfolders exist

digininja commented 2 weeks ago

Send a screenshot of you trying to browse to DVWA and the last 10 lines in the access and error logs while trying to do it.

I have a feeling your document root is pointing to a different location.