Series

Insecure Design

OWASP Top 10 A06:2025. Categorized DVWA vulnerabilities include File Upload, Insecure CAPTCHA, JavaScript Attacks, and Open HTTP Redirect.

File Upload in DVWA
Introduction This post demonstrates how a file upload vulnerability in the Damn Vulnerable Web Application (DVWA) can be exploited to achieve remote code execution. The objective of the attack is to u
Mar 12, 202615 min read489
JavaScript Attacks in DVWA
1 Introduction In this post, the JavaScript Attacks vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to analyse and manipulate the J
Mar 26, 202621 min read118
Insecure CAPTCHA in DVWA
1 Introduction In this post, the Insecure CAPTCHA vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to bypass the poor CAPTCHA system
Apr 18, 202627 min read14
Open HTTP Redirect in DVWA
Introduction Open Redirect is a web vulnerability that allows an application to redirect users to a different URL based on user-controlled input. At first glance, it might seem like a minor issue comp
Apr 19, 202614 min read25