Installation Linux (Apache)

Installation on Linux (Kali)

##Pre-Flight Check This tutorial will cover installation on Kali 2.0. The current Installed versions of Software are:

Server version: Apache/2.4.10 (Debian)
Server built:   Aug  1 2015 20:53:57

PHP 5.6.14-0+deb8u1 (cli) (built: Oct  4 2015 16:13:10) 
Copyright (c) 1997-2015 The PHP Group
Zend Engine v2.6.0, Copyright (c) 1998-2015 Zend Technologies
with Zend OPcache v7.0.6-dev, Copyright (c) 1999-2015, by Zend Technologies

After going through the Webserver Configuration, the setup will be as below, as this is apache 2 the file to edit was :

 /etc/apache2/apache2.conf 

Downloading the Software

Download the latest version of the Software from the github repository. i.e. https://github.com/alienwithin/OWASP-mth3l3m3nt-framework

Extract these files to the web root. The default web root for kali linux is :

/var/www/html/

This from a commandline perspective would be as below :

If you would like it installed in the Webroot you may move the files after the steps above to the webroot.

 cd OWASP-mth3l3m3nt-framework-master/
mv * /var/www/html

If you want it to remain in a sufolder but rename it the command would be :

 mv OWASP-mth3l3m3nt-framework-master/ NewFolderName/

Configuring the install

The first thing is giving the right permissions to the folders. Currently since we have done this as root it is proper to give the rights to the Apache user. The easiest way to do this is :

chown -R www-data:www-data /var/www/html

next we configure writeable folders to be writeable. We can do this with the commands below:

chmod -R 0777 tmp/
chmod -R 0777 framework/data/
chmod -R 0777 incoming/
chmod -R 0777 scripts/

If installed in the web root you are done with what you need to do. If you have it installed in a subfolder e.g. /var/www/html/install-new/ . One more step. Edit .htaccess by uncommenting out the line with RewriteBase to reflect.

RewriteBase yourSubFolder

This could be something as below considering our install-new/ subfolder.

First Run

Next Load the site on the address bar e.g.

http://owasp.mth3l3m3ntframework.com

To login assuming our URL is http://owasp.mth3l3m3ntframework.com the administration portal will be :

http://owasp.mth3l3m3ntframework.com/cnc

The default credentials are :

username: mth3l3m3nt
password: mth3l3m3nt

Successful Installation should give you a dashboard as below and you may start using the framework .

Note: By Default the framework utilises the JIG database that is a flat file however if you love RDBMS it supports MySQL, MSSQL and PostgreSQL . This can be switched in the settings.