How to Install Owasp Asst
-
2. Installing NodeJS
How to Install NodeJS on GNU/Linux:
You can go for the Latest available LTS Version.
In case to Check if it’s already there:node --version
-
3. Setting NodeJs Version
Now to Install Supported Node.js Version
This to let ASST works without any problem.
So, Install the required Package with:sudo npm install n -g
And then Install and Set the Version:
sudo n 12.13.0
Next, Open a New Terminal Window and Check it:
node --version
To switch back to the Lastest Version:
sudo n latest
For Help type:
n --help
This because Node Modules are not frequently Updated.
And so using the latest Node.js Engine may require you to update ASST’s Modules. -
4. Installing ASST
Now to Install ASST into Web Server
First, possibly to Install Git:sudo apt install git
And then to Clone the Repo:
git clone https://github.com/OWASP/ASST.git
Next Replace it into the Web Server Target.
So in case of a XAMPP one:sudo mv ./ASST/ /opt/lampp/htdocs/
-
5. Configuring ASST
So to Configure ASST Files
First, Set the Scan Target Project Path:
(Here for simplicity with the nano Editor, but you can just use Anyone.)nano /opt/lampp/htdocs/ASST/config.js
Possibly amend the above Command in base to your Server Location.
Ctrl+w to Search for “DEFAULT_PROJECT_PATH_TO_SCAN“
Set an absolute Path as for instance: /opt/lampp/htdocs/wordpress
Finally, Ctrl+x to Save & Exit from nano Editor.Then Edit the PHP Configuration.
Set PHP Installation Location:sudo nano /opt/lampp/htdocs/ASST/config_php_lang.js
Search and Set “PHP_EXE_BIN_PATH“, for a Default XAMPP like:
PHP_EXE_BIN_PATH: "/opt/lampp/bin/php"
Last, if you use MySQL look into the File How to Configure it.
Here a Screenshot:Else Set “IS_DBMS_USED” to “false.”
Contents