--- title: "#pentesting-dvwa articles | Hashnode" description: "Explore 14 articles tagged #pentesting-dvwa on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/pentesting-dvwa" --- Tag # #pentesting-dvwa 14 posts · 0 followers [Emma Engström](https://hashnode.com/@hexemma) · [May 6](https://hashnode.com/posts/cryptography-problems/69fafac650ecad4533f0b5e9) ### [Cryptography Problems in DVWA](https://pentesting-dvwa.hashnode.dev/cryptography-problems?utm_source=hashnode&utm_medium=feed) Introduction Cryptography is used everywhere in modern applications to protect sensitive data such as passwords, session tokens, and personal information. Strong cryptographic algorithms are essential 20 min read · [pentesting-dvwa.hashnode.dev](https://pentesting-dvwa.hashnode.dev/cryptography-problems?utm_source=hashnode&utm_medium=feed) [Wiktoria Blomgren Strandberg](https://hashnode.com/@wikipedia01) · [May 5](https://hashnode.com/posts/file-inclusion/69fa3660a386d7f121c476a0) ### [File Inclusion in DVWA](https://pentesting-dvwa.hashnode.dev/file-inclusion?utm_source=hashnode&utm_medium=feed) Documented penetration test of the File Inclusion vulnerability in DVWA. 22 min read · [pentesting-dvwa.hashnode.dev](https://pentesting-dvwa.hashnode.dev/file-inclusion?utm_source=hashnode&utm_medium=feed) [Wiktoria Blomgren Strandberg](https://hashnode.com/@wikipedia01) · [Apr 26](https://hashnode.com/posts/blind-sql-injection/69ee1ef03d6a492cdd0ca426) ### [Blind SQL Injection in DVWA](https://pentesting-dvwa.hashnode.dev/blind-sql-injection?utm_source=hashnode&utm_medium=feed) Documented penetration test of the Blind SQL Injection vulnerability in DVWA. 28 min read · [pentesting-dvwa.hashnode.dev](https://pentesting-dvwa.hashnode.dev/blind-sql-injection?utm_source=hashnode&utm_medium=feed) [Wiktoria Blomgren Strandberg](https://hashnode.com/@wikipedia01) · [Apr 18](https://hashnode.com/posts/insecure-captcha/69e3eccaee84f66e94d95772) ### [Insecure CAPTCHA in DVWA](https://pentesting-dvwa.hashnode.dev/insecure-captcha?utm_source=hashnode&utm_medium=feed) Documented penetration test of the Insecure CAPTCHA module in DVWA. 27 min read · [pentesting-dvwa.hashnode.dev](https://pentesting-dvwa.hashnode.dev/insecure-captcha?utm_source=hashnode&utm_medium=feed) [Wiktoria Blomgren Strandberg](https://hashnode.com/@wikipedia01) · [Apr 12](https://hashnode.com/posts/weak-session-ids/69dbd278aadf1107e20a5a1d) ### [Weak Session IDs in DVWA](https://pentesting-dvwa.hashnode.dev/weak-session-ids?utm_source=hashnode&utm_medium=feed) Documented penetration test of the Weak Session IDs module in DVWA. 16 min read · [pentesting-dvwa.hashnode.dev](https://pentesting-dvwa.hashnode.dev/weak-session-ids?utm_source=hashnode&utm_medium=feed) [Emma Engström](https://hashnode.com/@hexemma) · [Mar 29](https://hashnode.com/posts/dom-based-xss/69c8d7f37816e434a005d764) ### [DOM-Based XSS in DVWA](https://pentesting-dvwa.hashnode.dev/dom-based-xss?utm_source=hashnode&utm_medium=feed) Introduction This post examines a DOM-based cross-site scripting (XSS) vulnerability in the Damn Vulnerable Web Application (DVWA) and demonstrates how it can be exploited to achieve client-side code 14 min read · [pentesting-dvwa.hashnode.dev](https://pentesting-dvwa.hashnode.dev/dom-based-xss?utm_source=hashnode&utm_medium=feed) [Wiktoria Blomgren Strandberg](https://hashnode.com/@wikipedia01) · [Mar 26](https://hashnode.com/posts/javascript-attacks/69c5907f10e664c5da27842b) ### [JavaScript Attacks in DVWA](https://pentesting-dvwa.hashnode.dev/javascript-attacks?utm_source=hashnode&utm_medium=feed) Documented penetration test of the JavaScript Attacks vulnerability in DVWA. 21 min read · [pentesting-dvwa.hashnode.dev](https://pentesting-dvwa.hashnode.dev/javascript-attacks?utm_source=hashnode&utm_medium=feed) [Wiktoria Blomgren Strandberg](https://hashnode.com/@wikipedia01) · [Mar 21](https://hashnode.com/posts/api-security/69bea5934a1e513e41f701e9) ### [API Security in DVWA](https://pentesting-dvwa.hashnode.dev/api-security?utm_source=hashnode&utm_medium=feed) Documented penetration test of API Security vulnerability in DVWA. 29 min read · [pentesting-dvwa.hashnode.dev](https://pentesting-dvwa.hashnode.dev/api-security?utm_source=hashnode&utm_medium=feed) [Emma Engström](https://hashnode.com/@hexemma) · [Mar 19](https://hashnode.com/posts/reflected-xss/69bbe3fd8c55d6eefbde4dc0) ### [Reflected XSS in DVWA](https://pentesting-dvwa.hashnode.dev/reflected-xss?utm_source=hashnode&utm_medium=feed) Introduction This post demonstrates how a reflected Cross-Site Scripting (XSS) vulnerability in the Damn Vulnerable Web Application (DVWA) can be exploited to execute malicious client-side scripts in 14 min read · [pentesting-dvwa.hashnode.dev](https://pentesting-dvwa.hashnode.dev/reflected-xss?utm_source=hashnode&utm_medium=feed) [Wiktoria Blomgren Strandberg](https://hashnode.com/@wikipedia01) · [Mar 14](https://hashnode.com/posts/csp-bypass/69b59165210c74252f0bad5d) ### [CSP Bypass in DVWA](https://pentesting-dvwa.hashnode.dev/csp-bypass?utm_source=hashnode&utm_medium=feed) Documented penetration test of CSP Bypass vulnerability in DVWA. 16 min read · [pentesting-dvwa.hashnode.dev](https://pentesting-dvwa.hashnode.dev/csp-bypass?utm_source=hashnode&utm_medium=feed)