Ddamienanon14·Jul 26My First SQL InjectionI broke a login form with one line of SQL, dumped every password hash in the database, and cracked one open in seconds. Here's how.4 min read·infinitedomain.hashnode.dev
Ddamienanon14·Jul 17Setting Up a Home Lab Without Breaking the Bank: Pi + Dumpster LaptopSo I had a laptop running Arch Linux. Cool. Now what. A laptop by itself doesn't teach you cybersecurity. You need something to actually attack. Preferably something that won't get you a knock on the4 min read·infinitedomain.hashnode.dev
EEmma Engström·May 6Cryptography Problems in DVWAIntroduction Cryptography is used everywhere in modern applications to protect sensitive data such as passwords, session tokens, and personal information. Strong cryptographic algorithms are essential20 min read·pentesting-dvwa.hashnode.dev
WWiktoria Blomgren Strandberg·May 5File Inclusion in DVWADocumented penetration test of the File Inclusion vulnerability in DVWA.22 min read·pentesting-dvwa.hashnode.dev
WWiktoria Blomgren Strandberg·Apr 26Blind SQL Injection in DVWADocumented penetration test of the Blind SQL Injection vulnerability in DVWA.28 min read·pentesting-dvwa.hashnode.dev
WWiktoria Blomgren Strandberg·Apr 18Insecure CAPTCHA in DVWADocumented penetration test of the Insecure CAPTCHA module in DVWA.27 min read·pentesting-dvwa.hashnode.dev
WWiktoria Blomgren Strandberg·Apr 12Weak Session IDs in DVWADocumented penetration test of the Weak Session IDs module in DVWA.16 min read·pentesting-dvwa.hashnode.dev
EEmma Engström·Mar 29DOM-Based XSS in DVWA Introduction This post examines a DOM-based cross-site scripting (XSS) vulnerability in the Damn Vulnerable Web Application (DVWA) and demonstrates how it can be exploited to achieve client-side code14 min read·pentesting-dvwa.hashnode.dev
WWiktoria Blomgren Strandberg·Mar 26JavaScript Attacks in DVWADocumented penetration test of the JavaScript Attacks vulnerability in DVWA.21 min read·pentesting-dvwa.hashnode.dev
EEmma Engström·Mar 25Stored XSS in DVWAIntroduction This post examines a Stored Cross-Site Scripting (XSS) vulnerability in the Damn Vulnerable Web Application (DVWA), and demonstrates how it can be used to achieve persistent client-side c12 min read·pentesting-dvwa.hashnode.dev
