@hexemma

Open HTTP Redirect in DVWA

4d ago · 14 min read · Introduction Open Redirect is a web vulnerability that allows an application to redirect users to a different URL based on user-controlled input. At first glance, it might seem like a minor issue comp

Cross Site Request Forgery (CSRF) in DVWA

Apr 12 · 14 min read · Introduction Cross-Site Request Forgery (CSRF) is a web vulnerability that allows attackers to perform unauthorized actions on behalf of an authenticated user, often without the victim ever realizing

DOM-Based XSS in DVWA

Mar 29 · 14 min read · Introduction This post examines a DOM-based cross-site scripting (XSS) vulnerability in the Damn Vulnerable Web Application (DVWA) and demonstrates how it can be exploited to achieve client-side code

Stored XSS in DVWA

Mar 25 · 12 min read · Introduction This post examines a Stored Cross-Site Scripting (XSS) vulnerability in the Damn Vulnerable Web Application (DVWA), and demonstrates how it can be used to achieve persistent client-side c

Reflected XSS in DVWA

Mar 19 · 14 min read · Introduction This post demonstrates how a reflected Cross-Site Scripting (XSS) vulnerability in the Damn Vulnerable Web Application (DVWA) can be exploited to execute malicious client-side scripts in