Questions tagged [dvwa]
Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and aid teachers/students to teach/learn web application security in a class room environment.
45
questions
0
votes
0
answers
48
views
Brute-Force by using XAMPP on windows, Ubuntu installed in Windows and DVWA
I am currently using XAMPP installed on windows to do a brute-force attack to DVWA. The command prompt that I used is Ubuntu, but the virtual machine is not opened and installed. Just a command prompt ...
0
votes
0
answers
9
views
Hydra returning random and wrong password [duplicate]
I tried everything, I followed a tutorial https://www.youtube.com/watch?v=lGeSQ7STHaE&ab_channel=CartesianCaramel I did the exact same thing.
Why does hydra return wrong and random passwords for ...
- 1
1
vote
0
answers
597
views
Reverse shell not working [closed]
I'm running a DVWA container on my kali VM using:
docker run --rm -it -p 80:80 vulnerables/web-dvwa
Network interface details:
Kali docker0 int: 172.17.0.1/16
Kali eth0 int: 192.168.1.233/24
DVWA ...
- 11
1
vote
1
answer
1k
views
Brute-Forcing DVWA login page with hydra - csrf incorrect
I'm learning how to use hydra, but I found a problem.
When I run the following script, I get a CSRF token error. Apparently, the problem is that the token received in CURL is different from the one in ...
- 13
1
vote
0
answers
628
views
Brute forcing the brute force page on DVWA v1.0.7 using hydra
I am trying to brute force the brute force log-in page on DVWA v1.0.7 (/dvwa/vulnerabilities/brute/)
I have been working on this for quite some time but I keep getting a bunch of false positives when ...
- 11
0
votes
0
answers
119
views
Failed to inject payload with Python requests library in DVWA forms
I have written a Python script to inject a payload through the requests library, but the payload is being added instead of injecting
xsstestscript=html.unescape("<script>alert&#...
- 1
1
vote
0
answers
1k
views
XSS Payload Cookie Stealing
I have been playing around with the DVWA stored XSS page and wondered if someone could help.
I used XSS Validator in Burp and found numerous payloads that give a prompt, indicating that XSS is present....
- 11
0
votes
0
answers
1k
views
All passwords valid hydra
I was trying hydra out on DVWA login page, but it returned all 7 passwords correct, while only one was correct.
Here is the command:
hydra -l admin -P passlist.txt -V -I 192.168.70.130 http-post-form &...
- 1
0
votes
1
answer
1k
views
Hydra hangs after TASKS number of tries
I have dvwa set up and i am using the command:
hydra -IV -t 1 -l admin -P rockyou.txt localhost http-get-form "/vulnerabilities/brute/index.php:username=^USER^&password=^PASS^&Login=Login:...
- 1
1
vote
2
answers
2k
views
Brute Forcing DVWA with Hydra
I am attempting to brute-force 'DVWA/vulnerabilities/brute/' with Hydra, rockyou.txt password list.
I tried using this command:
hydra 127.0.0.1 -V -l admin -P rockyou.txt http-get-form "/DVWA/...
- 11
1
vote
0
answers
109
views
DVWA file upload background
I've just started in penetration testing with metasploitable and currently trying to learn file upload vulnerability present in DVWA module. I know that somehow upload is preventing files other than ...
- 11
0
votes
1
answer
272
views
Injecting script from outside for local machine url request
I have setup a local apache server with php module.I deployed a dvwa in my localmachinne..I am learning about XSS(DOM) type of attack.I setup the low level security in dvwa.When i added <script>...
- 11
0
votes
1
answer
772
views
OWASP ZAP submit forms
I'm trying to find SQL injection vulnerability in DVWA with OWASP ZAP. After some clicking through the page I have a small site map:
I ran Active scan, Spider and AJAX spider on the GET:sqli node. As ...
- 101
0
votes
1
answer
1k
views
Command Injection DVWA (1.0.7 iso version) High Security level
I am practising on an older version of DVWA (1.0.7 iso image). In High Security settings, I am trying to perform command injection and this is the source code snippet I saw
$target = stripslashes( $...
- 177
2
votes
1
answer
861
views
How exactly works this SQL injection example related to the DVWA application?
I am a software developer converting do application security and I have some doubts about SQL injection example.
I am following a tutorial related the famous DVWA: http://www.dvwa.co.uk/
So I have ...
- 235
0
votes
1
answer
818
views
XVWA PBKDF2 with sha256 and 1000 iteration
In XVWA (Xtreme Vulnerable Web Application) I presented with an PBKDF2 with sha256 and 1000 iteration as such:
<?php
function create_hash($password)
{
// format: algorithm:iterations:salt:...
- 1,840
2
votes
1
answer
9k
views
Why does the file "shell.php.jpg" can execute as a php file but "shell.jpg" cannot?
I am learning about file upload vulnerabilities using DVWA.
After cranking the website's security level to High,
the website checks both the post request's content type & file extension, so in ...
- 23
1
vote
0
answers
306
views
Hydra gives different password each time (DVWA)
I've looked up this issue and everyone's problem was they didn't have the failed login string. I do. Trying to get into DVWA.
Here's my command
hydra 10.0.250.143 -l admin -P P.txt http-get-form "/...
- 11
0
votes
1
answer
4k
views
Bypassing htmlspecialchars() for XSS (Reflected) and using an event handler is not an option in this case
I am trying to bypass high security XSS on DVWA. So the vulnerable code(I highly doubt that is it really vulnerable?) is:-
<?php
if(!array_key_exists ("name", $_GET) || $_GET['name'] == NULL || $...
- 177
0
votes
1
answer
179
views
Attack Web Forms dvwa to achieve lfi
Does anyone know how to hack dvwa(http://www.dvwa.co.uk) via submitting a form input like ../../../../../etc/passwd to expose the /etc/passwd of a given server?
Is there a endpoint to hit for this?
...
- 1
2
votes
0
answers
413
views
XSS stored in DVWA
Trying "XSS stored in DVWA" and now I am completely confused. It is not letting me bypass, I tried many inputs and I know what the preg_replace() is doing still nothing seems to work for me. I used ...
- 21
-1
votes
2
answers
1k
views
High Level CSRF
I have been doing a bit of dvwa (damn vulnerable web application) and I have a question on CSRF.
There is an additional parameter, a csrf token, which is submitted in the get request.
All the answers ...
- 3,794
1
vote
2
answers
8k
views
Brute-Forcing DVWA login page with hydra
I'm learning how to brute force web login pages with a popular brute force tool called "Hydra". I'm using Kali Linux (VirtualBox) to do this. I've installed DVWA (Damn Vulnerable Web Application) and ...
- 11
1
vote
3
answers
2k
views
DVWA: "Hacking attempt detected..."
Hello and good evening,
i've recently tried to improve my pentesting skills and learn more about it with metasploitable 2. I am trying some things on the DVWA.
For the moment, i am learning the ...
- 11
2
votes
1
answer
1k
views
Is it safe to install Xampp to learn Security and Penetration testing using DVWA? [duplicate]
I have heard Xampp is not safe and has a lot of security loopholes. What steps need to be taken to close the loopholes? Is it better if I use a VM instead?
I new to Security Testing and want to learn ...
- 123
1
vote
0
answers
2k
views
DVWA cant be injected with SQLMAP [id is not injectionable]
I'm trying to catch SQL Injection attacks from DVWA with sqlmap, I'm using the most simple option it provides, but it's strange that sometimes it works and other it doesn't, showing a message similar ...
- 191
0
votes
1
answer
10k
views
How to make Sqlmap obtain administrator rights for database?
I'm using sqlmap to exploit databases in a DVWA-project.
However, after having exploited the database, I executed the following command to learn that the user is dvwa@%:
sqlmap -u "http://192.168....
- 1,207
3
votes
1
answer
507
views
Deliberately vulnerable Flash applications?
I'm trying to find some deliberately vulnerable Flash applications that I can practice security testing on (in the same vein as applications like the Damn Vulnerable applications).
Ive noticed there ...
- 41
-4
votes
1
answer
6k
views
Hydra brute-force not working [closed]
This is the command I am using and when I press Enter :
hydra -L username.txt -P passwords.txt localhost http-post-form "dvwa/login.php:username=^USER^&password=^PASS^&Login="Login Failed"
>
...
3
votes
0
answers
1k
views
Hydra does not display the right answer in DVWA
I have been trying for days now to use Hydra in an attempt to crack DVWA brute force but to no avail, I am using the correct session cookie and to my knowledge have the correct syntax?
Query is:
hydra ...
user165319
2
votes
4
answers
62k
views
John the Ripper - Can't get cracked MD5 hash to show
I'm trying to crack some MD5 hashes given in OWASP's BWA on their DVWA site. I was able to use John the Ripper and the very first time it worked fine and it showed the reversed hashes using the code:
...
- 39
1
vote
2
answers
1k
views
DVWA - Odd command injection behaviour (High)
After completing the OS Command Injection level on High, I was delving a little deeper so I could write it up. It seems that while the solution works on the web app the same command errors on the ...
- 11
3
votes
3
answers
7k
views
How to make a victim submit a post via XSS?
In DVWA I'm trying to understand different methods of attack than the usual alert('XSS'); scenario.
I am using reflective XSS to deliver a payload which then makes the user who follows the URL submit ...
- 61
0
votes
2
answers
4k
views
DVWA Command Execution High [duplicate]
Has someone done this level? I get that i'm supposed to bypass the trim function, but i don't see how could this be done if every relevant character has been blacklisted except for the redirection (>)....
- 21
1
vote
0
answers
507
views
dvwa is prompting me to check config file when trying to create database
I believe I have made the proper changes to the xampp/htdocs/DVWA-1.9/config/config.inc.php file and the xampp/passwords.txt file. The passwords match, security is low, port is changed (not sure if I ...
- 11
1
vote
1
answer
3k
views
Why is this SQL Injection attempt failing on DVWA?
I'm practicing SQL injection on DVWA (non-blind) with the lowest security settings. I want to list the tables in the current database. To do that, I attempt to enter 0'; show tables;-- in the User ID ...
- 113
6
votes
1
answer
5k
views
DVWA - Command Injection (high level)
I am attempting to educate myself further on web securities using DVWA. I am stumped on Command Injection, on the high level
The help states
The developer has either made a slight typo with the ...
- 163
2
votes
0
answers
70
views
Navigating SQL Injection Safeguards [duplicate]
I'm trying to get around the DVWA high security SQL injection challenge, I've tried a bunch of automated scanning tools with no luck, read a bunch of articles saying it's impossible now i've turned to ...
- 2,617
2
votes
1
answer
4k
views
Why isn't it possible to do SQL injection (HIGH Level) in this example in Damn Vulnerable Web App?
$query = " $sql = select * from users where id = '$id' "
Won't $id=3' OR '1'='1 break the query ?
The doubt arose because someone claimed it can't be broken.
0
votes
1
answer
5k
views
Using timeouts to automatically detect blind sql injection exploits
I'm working on a penetration testing tool, and I have error-based sql injection pretty much covered, but I was wondering, is it possible to use timeouts, along with built in sql commands to detect an ...
- 243
17
votes
5
answers
20k
views
Is it possible to do SQL injection (HIGH Level) on Damn Vulnerable Web App?
I searched all over google to see how it would be possible to bypass the following (it's from the high level of security from DVWA):
<?php
if (isset($_GET['Submit'])) {
// Retrieve data
$id ...
- 173
1
vote
2
answers
7k
views
Issues setting up DVWA for SQLMAP [closed]
I am starting on sqlmap, and have dvwa for practicing web app penetration.
I am having the error "Could not connect to the database - please check the config file."
Not sure what the problem ...
- 21
6
votes
2
answers
18k
views
Why some sites are not shown when embedding them in an iframe?
Exploiting the DVWA's stored XSS option, I'm using the following payload: <iframe src="url">.
I'd like to know why do some sites work but others don't when using this payload.
For example: <...
user15194
2
votes
2
answers
2k
views
DVWA vulnerability list or guide? [closed]
Is there a list of vulnerabilities for DVWA, I cannot seem to find a vulnerability list or guide.
By guide I mean an exhaustive list of vulnerabilities to work through.
user13785
4
votes
1
answer
43k
views
How to use http-get-form in THC-Hydra?
I've been messing with Hydra (Brute Force) to solve the "Damn Vulnerable Web App"
brute force section but the problem is when I use http-get-form it said:
Warning: child 1 seems to have died, ...
- 41