---
title: "Discussion on \"CSP Bypass in DVWA\" | Hashnode"
description: "Discussion on \"CSP Bypass in DVWA\". Documented penetration test of CSP Bypass vulnerability in DVWA."
url: "https://hashnode.com/posts/csp-bypass/69b59165210c74252f0bad5d"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [CSP Bypass in DVWA](https://pentesting-dvwa.hashnode.dev/csp-bypass?utm_source=hashnode&utm_medium=feed)

Documented penetration test of CSP Bypass vulnerability in DVWA.

Mar 14 · 16 min read · pentesting-dvwa.hashnode.dev  
Updated May 12  
Read the article

-   [#csp-bypass](https://hashnode.com/tag/csp-bypass)
-   [#pentesting](https://hashnode.com/tag/pentesting)
-   [#penetration-testing](https://hashnode.com/tag/penetration-testing)
-   [#dvwa](https://hashnode.com/tag/dvwa)
-   [#cia-triad](https://hashnode.com/tag/cia-triad)
-   [#cyber-kill-chain](https://hashnode.com/tag/cyber-kill-chain)
-   [#owasp-top-10](https://hashnode.com/tag/owasp-top-10)
-   [#web-application-security](https://hashnode.com/tag/web-application-security)
-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#kali-linux](https://hashnode.com/tag/kali-linux)
-   [#virtual-machine](https://hashnode.com/tag/virtual-machine)
-   [#attack](https://hashnode.com/tag/attack)
-   [#content-security-policy](https://hashnode.com/tag/content-security-policy)
-   [#xss](https://hashnode.com/tag/xss)
-   [#javascript](https://hashnode.com/tag/javascript)
-   [#github](https://hashnode.com/tag/github)
-   [#jsdelivr](https://hashnode.com/tag/jsdelivr)
-   [#burpsuite](https://hashnode.com/tag/burpsuite)
-   [#cross-site-scripting](https://hashnode.com/tag/cross-site-scripting)
-   [#developer-tools](https://hashnode.com/tag/developer-tools)
-   [#security-misconfiguration](https://hashnode.com/tag/security-misconfiguration)
-   [#pentesting-dvwa](https://hashnode.com/tag/pentesting-dvwa)
-   [#vulnerability-assessment](https://hashnode.com/tag/vulnerability-assessment)
-   [#web-security](https://hashnode.com/tag/web-security)
-   [#application-security](https://hashnode.com/tag/application-security)
-   [#browser-security](https://hashnode.com/tag/browser-security)
-   [#client-side-security](https://hashnode.com/tag/client-side-security)
-   [#xss-attacks](https://hashnode.com/tag/xss-attacks)
-   [#virtualbox](https://hashnode.com/tag/virtualbox)
-   [#javascript-security](https://hashnode.com/tag/javascript-security)
-   [#json-p](https://hashnode.com/tag/json-p)
-   [#dom-manipulation](https://hashnode.com/tag/dom-manipulation)
-   [#injection](https://hashnode.com/tag/injection)
-   [#same-origin-policy](https://hashnode.com/tag/same-origin-policy)
-   [#secure-coding](https://hashnode.com/tag/secure-coding)
-   [#input-validation](https://hashnode.com/tag/input-validation)
-   [#output-encoding](https://hashnode.com/tag/output-encoding)
-   [#securedevelopment](https://hashnode.com/tag/securedevelopment)
-   [#wiktoria-blomgren-strandberg](https://hashnode.com/tag/wiktoria-blomgren-strandberg)
-   [#csp-bypass-in-dvwa](https://hashnode.com/tag/csp-bypass-in-dvwa)

## Written by

[Wiktoria Blomgren Strandberg](https://hashnode.com/@wikipedia01)

@wikipedia01 · Sweden

  
[View profile](https://hashnode.com/@wikipedia01)

Master's student at the University of Skövde in Privacy, information security and cybersecurity

## Responses

Markdown supported · ⌘↵ to post

No responses yet.