EEmma Engström·May 6Cryptography Problems in DVWAIntroduction Cryptography is used everywhere in modern applications to protect sensitive data such as passwords, session tokens, and personal information. Strong cryptographic algorithms are essential20 min read·pentesting-dvwa.hashnode.dev
WWiktoria Blomgren Strandberg·May 5File Inclusion in DVWADocumented penetration test of the File Inclusion vulnerability in DVWA.22 min read·pentesting-dvwa.hashnode.dev
WWiktoria Blomgren Strandberg·Apr 26Blind SQL Injection in DVWADocumented penetration test of the Blind SQL Injection vulnerability in DVWA.28 min read·pentesting-dvwa.hashnode.dev
WWiktoria Blomgren Strandberg·Apr 18Insecure CAPTCHA in DVWADocumented penetration test of the Insecure CAPTCHA module in DVWA.27 min read·pentesting-dvwa.hashnode.dev
WWiktoria Blomgren Strandberg·Apr 12Weak Session IDs in DVWADocumented penetration test of the Weak Session IDs module in DVWA.16 min read·pentesting-dvwa.hashnode.dev
EEmma Engström·Mar 29DOM-Based XSS in DVWA Introduction This post examines a DOM-based cross-site scripting (XSS) vulnerability in the Damn Vulnerable Web Application (DVWA) and demonstrates how it can be exploited to achieve client-side code14 min read·pentesting-dvwa.hashnode.dev
WWiktoria Blomgren Strandberg·Mar 26JavaScript Attacks in DVWADocumented penetration test of the JavaScript Attacks vulnerability in DVWA.21 min read·pentesting-dvwa.hashnode.dev
WWiktoria Blomgren Strandberg·Mar 21API Security in DVWADocumented penetration test of API Security vulnerability in DVWA.29 min read·pentesting-dvwa.hashnode.dev
EEmma Engström·Mar 19Reflected XSS in DVWAIntroduction This post demonstrates how a reflected Cross-Site Scripting (XSS) vulnerability in the Damn Vulnerable Web Application (DVWA) can be exploited to execute malicious client-side scripts in14 min read·pentesting-dvwa.hashnode.dev
WWiktoria Blomgren Strandberg·Mar 14CSP Bypass in DVWADocumented penetration test of CSP Bypass vulnerability in DVWA.16 min read·pentesting-dvwa.hashnode.dev
