Cryptography Problems in DVWAIntroduction Cryptography is used everywhere in modern applications to protect sensitive data such as passwords, session tokens, and personal information. Strong cryptographic algorithms are essential20 min read·pentesting-dvwa.hashnode.devMay 6
Command Injection in DVWAIntroduction Command Injection is a web vulnerability that occurs when an application passes user-controlled input directly to a system shell without proper validation. In such cases, an attacker can12 min read·pentesting-dvwa.hashnode.devApr 26
Open HTTP Redirect in DVWA Introduction Open Redirect is a web vulnerability that allows an application to redirect users to a different URL based on user-controlled input. At first glance, it might seem like a minor issue comp14 min read·pentesting-dvwa.hashnode.devApr 19
Cross Site Request Forgery (CSRF) in DVWAIntroduction Cross-Site Request Forgery (CSRF) is a web vulnerability that allows attackers to perform unauthorized actions on behalf of an authenticated user, often without the victim ever realizing14 min read·pentesting-dvwa.hashnode.devApr 12
DOM-Based XSS in DVWA Introduction This post examines a DOM-based cross-site scripting (XSS) vulnerability in the Damn Vulnerable Web Application (DVWA) and demonstrates how it can be exploited to achieve client-side code14 min read·pentesting-dvwa.hashnode.devMar 29