WWiktoria Blomgren StrandbergMay 5 · 22 min readFile Inclusion in DVWA1 Introduction In this post, the File Inclusion vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for local file inclusion (LFI) attacks on all levels is to read pentesting-dvwa.hashnode.dev
WWiktoria Blomgren StrandbergApr 26 · 28 min readBlind SQL Injection in DVWA1 Introduction In this post, the Blind SQL Injection vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to find the version of the SQLpentesting-dvwa.hashnode.dev
WWiktoria Blomgren StrandbergApr 18 · 27 min readInsecure CAPTCHA in DVWA1 Introduction In this post, the Insecure CAPTCHA vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to bypass the poor CAPTCHA systempentesting-dvwa.hashnode.dev
WWiktoria Blomgren StrandbergApr 12 · 16 min readWeak Session IDs in DVWA1 Introduction In this post, the Weak Session IDs vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to work out how the ID is generatpentesting-dvwa.hashnode.dev
WWiktoria Blomgren StrandbergMar 26 · 21 min readJavaScript Attacks in DVWA1 Introduction In this post, the JavaScript Attacks vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to analyse and manipulate the Jpentesting-dvwa.hashnode.dev
WWiktoria Blomgren StrandbergMar 21 · 29 min readAPI Security in DVWA1 Introduction In this post, the API Security vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks across all security levels is to exploit weaknesses inpentesting-dvwa.hashnode.dev
WWiktoria Blomgren StrandbergMar 14 · 16 min readCSP Bypass in DVWA1 Introduction In this post, the Content Security Policy (CSP) Bypass vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to bypass thepentesting-dvwa.hashnode.dev
WWiktoria Blomgren StrandbergMar 8 · 14 min readAuthorisation Bypass in DVWA1 Introduction In this post, the Authorisation Bypass vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to identify any areas where apentesting-dvwa.hashnode.dev
WWiktoria Blomgren StrandbergMar 6 · 24 min readSQL Injection in DVWA1 Introduction In this post, the SQL Injection vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to extract user login credentials. Tpentesting-dvwa.hashnode.dev
