DVWA - Javascript
Information How to install dvwa on Kali. Official GitHub repository. The DVWA server itself contains instructions about almost everything. Damn Vulnerable Web Application (DVWA) is a P...
Pentest Journeys
DVWA - CSP Bypass
Information How to install dvwa on Kali. Official GitHub repository. The DVWA server itself contains instructions about almost everything. Damn Vulnerable Web Application (DVWA) is a P...
DVWA - XSS (Stored)
Information How to install dvwa on Kali. Official GitHub repository. The DVWA server itself contains instructions about almost everything. Damn Vulnerable Web Application (DVWA) is a P...
DVWA - XSS (Reflected)
Information How to install dvwa on Kali. Official GitHub repository. The DVWA server itself contains instructions about almost everything. Damn Vulnerable Web Application (DVWA) is a P...
DVWA - XSS (DOM)
Information How to install dvwa on Kali. Official GitHub repository. The DVWA server itself contains instructions about almost everything. Damn Vulnerable Web Application (DVWA) is a P...
PicoCTF - More Cookies
The homepage seems simple enough: By intercepting and inspecting the request with Burp, we see that there is a cookie called auth_name which seems to be Base64 encoded: ...
PicoCTF - Some Assembly Required 1
Visiting the site we encounter just an input box: Inspecting the page we notice two files: The first one looks like obfuscated JS code: ...
PicoCTF - Scavenger Hunt
Visiting the site: This looks (almost) identical to the Insp3ct0r challenge. Let’s see if by viewing the page’s HTML, CSS, and JS code would be enough to get the fla...
DVWA - Weak Sessions IDs
Information How to install dvwa on Kali. Official GitHub repository. The DVWA server itself contains instructions about almost everything. Damn Vulnerable Web Application (DVWA) is a P...
DVWA - SQL Injection (Blind)
SECTION NOT WORKING PROPERLY - WRITE UP NOT COMPLETE! Information How to install dvwa on Kali. Official GitHub repository. The DVWA server itself contains instructions about almost ...