Ddamienanon14Jul 26 · 4 min readMy First SQL InjectionI've been building up to this one for a while. Out of everything I've worked through in the lab so far, SQL injection is the attack that actually made cybersecurity feel real to me, not because it's finfinitedomain.hashnode.dev
Ddamienanon14Jul 17 · 4 min readSetting Up a Home Lab Without Breaking the Bank: Pi + Dumpster LaptopSo I had a laptop running Arch Linux. Cool. Now what. A laptop by itself doesn't teach you cybersecurity. You need something to actually attack. Preferably something that won't get you a knock on the infinitedomain.hashnode.dev
EEmma EngströmMay 6 · 20 min readCryptography Problems in DVWAIntroduction Cryptography is used everywhere in modern applications to protect sensitive data such as passwords, session tokens, and personal information. Strong cryptographic algorithms are essentialpentesting-dvwa.hashnode.dev
WWiktoria Blomgren StrandbergMay 5 · 22 min readFile Inclusion in DVWA1 Introduction In this post, the File Inclusion vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for local file inclusion (LFI) attacks on all levels is to read pentesting-dvwa.hashnode.dev
WWiktoria Blomgren StrandbergApr 26 · 28 min readBlind SQL Injection in DVWA1 Introduction In this post, the Blind SQL Injection vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to find the version of the SQLpentesting-dvwa.hashnode.dev
WWiktoria Blomgren StrandbergApr 18 · 27 min readInsecure CAPTCHA in DVWA1 Introduction In this post, the Insecure CAPTCHA vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to bypass the poor CAPTCHA systempentesting-dvwa.hashnode.dev
WWiktoria Blomgren StrandbergApr 12 · 16 min readWeak Session IDs in DVWA1 Introduction In this post, the Weak Session IDs vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to work out how the ID is generatpentesting-dvwa.hashnode.dev
EEmma EngströmMar 29 · 14 min readDOM-Based XSS in DVWA Introduction This post examines a DOM-based cross-site scripting (XSS) vulnerability in the Damn Vulnerable Web Application (DVWA) and demonstrates how it can be exploited to achieve client-side code pentesting-dvwa.hashnode.dev
WWiktoria Blomgren StrandbergMar 26 · 21 min readJavaScript Attacks in DVWA1 Introduction In this post, the JavaScript Attacks vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to analyse and manipulate the Jpentesting-dvwa.hashnode.dev
EEmma EngströmMar 25 · 12 min readStored XSS in DVWAIntroduction This post examines a Stored Cross-Site Scripting (XSS) vulnerability in the Damn Vulnerable Web Application (DVWA), and demonstrates how it can be used to achieve persistent client-side cpentesting-dvwa.hashnode.dev
