SQL Injection in DVWA
1 Introduction In this post, the SQL Injection vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to extract user login credentials. T
Mar 6, 202624 min read811
Command Palette
Search for a command to run...
Series
Injection
OWASP Top 10 A05:2025. Categorized DVWA vulnerabilities include Command Injection, File Inclusion, SQL Injection, SQL Injection (Blind), XSS (DOM), XSS (Reflected), and XSS (Stored).
Reflected XSS in DVWA
Introduction This post demonstrates how a reflected Cross-Site Scripting (XSS) vulnerability in the Damn Vulnerable Web Application (DVWA) can be exploited to execute malicious client-side scripts in
Mar 19, 202614 min read213
Stored XSS in DVWA
Introduction This post examines a Stored Cross-Site Scripting (XSS) vulnerability in the Damn Vulnerable Web Application (DVWA), and demonstrates how it can be used to achieve persistent client-side c
Mar 25, 202612 min read138
DOM-Based XSS in DVWA
Introduction This post examines a DOM-based cross-site scripting (XSS) vulnerability in the Damn Vulnerable Web Application (DVWA) and demonstrates how it can be exploited to achieve client-side code
Mar 29, 202614 min read44
Blind SQL Injection in DVWA
1 Introduction In this post, the Blind SQL Injection vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to find the version of the SQL
Apr 26, 202628 min read90
Command Injection in DVWA
Introduction Command Injection is a web vulnerability that occurs when an application passes user-controlled input directly to a system shell without proper validation. In such cases, an attacker can
Apr 26, 202612 min read68