Questions tagged [owasp-bwa]

OWASP Broken Web Applications is a collection of deliberately vulnerable applications to practice pen testing on.

Filter by
Sorted by
Tagged with
-1 votes
1 answer
215 views

Can't bypass filter [closed]

Trying some malicious injection against bWAPP and came across bypass captcha Filter validating captcha is if($_POST["captcha_user"] == $_SESSION["captcha"]) Tried input 1' || '2 ...
user avatar
0 votes
1 answer
514 views

SQLMAP Redirect using xampp

I am learning SQLi using sqlmap and xampp. I set up my lab the same way as per tutorial but when I run sqlmap.py -u "http://localhost/bwapp/sqli_1.php?title=1*" the error got 302 redirected to ...
user avatar
4 votes
1 answer
4k views

How do I use sqlmap to dump the OWASP Juice Shop schema?

I cannot seem to get sqlmap to successfully exploit and retrieve schema information from OWASP's deliberately vulnerable Juice Shop web application. I've tried to be very specific in my sqlmap ...
user avatar
  • 143
1 vote
1 answer
309 views

What are the risks of publicly hosting OWASP Juice shop

For those who don't know it: The Juice shop is an intentionally vulnerable webshop which 'supports' SQL injection, XSS, DoS and all this kind of nasty stuff. It's nice to run on localhost and play a ...
user avatar
  • 13
1 vote
2 answers
4k views

What are the common features to identify XSS attack from Apache log file?

I have tried some XSS vulnerability on web application such as webgoat, OWASP mutillidae, bWAPP. I want to know the features/keywords/footprints of cross site scripting attack in apache log file and ...
user avatar
  • 151
2 votes
3 answers
4k views

Injecting <script>alert("1")</script> to OWASP Juice shop doesn't work

I've just learned the theory behind XSS attacks and now I would like to test my knowledge in a legal way. I wanted to "hack" OWASP Juice shop by following steps from this book section "Perform a ...
user avatar
0 votes
1 answer
2k views

bWAPP- SQL injection Hack displays a white screen?

I've been following this video(https://www.youtube.com/watch?v=XDCZ8FC856s) to install bWAPP on Parrot OS and everything works fine except SQL Injection. I've checked the database and its active. As ...
user avatar
12 votes
4 answers
12k views

SQL Injection Escaping Challenge Security Shepherd

I am using Security Shepherd as a training tool and I am now in the challenge, SQL Injection Escaping Challenge. The Challenge: When I make a query just like the one above (just with different ...
user avatar
  • 121
1 vote
1 answer
8k views

SQLMAP unable to upload the stager file with 404 error

I can't get to upload the stager file on the OWASP BWA document root (/var/wwww/WackoPicko/users). I am not sure how to troubleshoot this error. root kali:~# sqlmap -u "http://x.x.x.x/WackoPicko/...
user avatar