---
title: "Emma Engström (@hexemma) | Hashnode"
description: "Emma Engström (@hexemma) writes on Hashnode. Read their latest articles and follow their work."
url: "https://hashnode.com/@hexemma"
---

@hexemma

# Emma Engström

@hexemma · Stockholm, Sweden · Joined March 2026

### [Cryptography Problems in DVWA](https://pentesting-dvwa.hashnode.dev/cryptography-problems?utm_source=hashnode&utm_medium=feed)

Introduction Cryptography is used everywhere in modern applications to protect sensitive data such as passwords, session tokens, and personal information. Strong cryptographic algorithms are essential

20 min read · [pentesting-dvwa.hashnode.dev](https://pentesting-dvwa.hashnode.dev/cryptography-problems?utm_source=hashnode&utm_medium=feed)

[May 6](https://hashnode.com/posts/cryptography-problems/69fafac650ecad4533f0b5e9)

### [Command Injection in DVWA](https://pentesting-dvwa.hashnode.dev/command-injection?utm_source=hashnode&utm_medium=feed)

Introduction Command Injection is a web vulnerability that occurs when an application passes user-controlled input directly to a system shell without proper validation. In such cases, an attacker can

12 min read · [pentesting-dvwa.hashnode.dev](https://pentesting-dvwa.hashnode.dev/command-injection?utm_source=hashnode&utm_medium=feed)

[Apr 26](https://hashnode.com/posts/command-injection/69ee59523d6a492cdd3757c8)

### [Open HTTP Redirect in DVWA](https://pentesting-dvwa.hashnode.dev/open-http-redirect?utm_source=hashnode&utm_medium=feed)

Introduction Open Redirect is a web vulnerability that allows an application to redirect users to a different URL based on user-controlled input. At first glance, it might seem like a minor issue comp

14 min read · [pentesting-dvwa.hashnode.dev](https://pentesting-dvwa.hashnode.dev/open-http-redirect?utm_source=hashnode&utm_medium=feed)

[Apr 19](https://hashnode.com/posts/open-http-redirect/69e4850fee84f66e9428fe80)

### [Cross Site Request Forgery (CSRF) in DVWA](https://pentesting-dvwa.hashnode.dev/cross-site-request-forgery-csrf?utm_source=hashnode&utm_medium=feed)

Introduction Cross-Site Request Forgery (CSRF) is a web vulnerability that allows attackers to perform unauthorized actions on behalf of an authenticated user, often without the victim ever realizing

14 min read · [pentesting-dvwa.hashnode.dev](https://pentesting-dvwa.hashnode.dev/cross-site-request-forgery-csrf?utm_source=hashnode&utm_medium=feed)

[Apr 12](https://hashnode.com/posts/cross-site-request-forgery-csrf/69dbf7c9aadf1107e225304a)

### [DOM-Based XSS in DVWA](https://pentesting-dvwa.hashnode.dev/dom-based-xss?utm_source=hashnode&utm_medium=feed)

Introduction This post examines a DOM-based cross-site scripting (XSS) vulnerability in the Damn Vulnerable Web Application (DVWA) and demonstrates how it can be exploited to achieve client-side code

14 min read · [pentesting-dvwa.hashnode.dev](https://pentesting-dvwa.hashnode.dev/dom-based-xss?utm_source=hashnode&utm_medium=feed)

[Mar 29](https://hashnode.com/posts/dom-based-xss/69c8d7f37816e434a005d764)