Cryptography Problems in DVWAIntroduction Cryptography is used everywhere in modern applications to protect sensitive data such as passwords, session tokens, and personal information. Strong cryptographic algorithms are essentialMay 6 · 20 min readpentesting-dvwa.hashnode.dev
Command Injection in DVWAIntroduction Command Injection is a web vulnerability that occurs when an application passes user-controlled input directly to a system shell without proper validation. In such cases, an attacker can Apr 26 · 12 min readpentesting-dvwa.hashnode.dev
Open HTTP Redirect in DVWA Introduction Open Redirect is a web vulnerability that allows an application to redirect users to a different URL based on user-controlled input. At first glance, it might seem like a minor issue compApr 19 · 14 min readpentesting-dvwa.hashnode.dev
Cross Site Request Forgery (CSRF) in DVWAIntroduction Cross-Site Request Forgery (CSRF) is a web vulnerability that allows attackers to perform unauthorized actions on behalf of an authenticated user, often without the victim ever realizing Apr 12 · 14 min readpentesting-dvwa.hashnode.dev
DOM-Based XSS in DVWA Introduction This post examines a DOM-based cross-site scripting (XSS) vulnerability in the Damn Vulnerable Web Application (DVWA) and demonstrates how it can be exploited to achieve client-side code Mar 29 · 14 min readpentesting-dvwa.hashnode.dev