We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [owasp-bwa]

OWASP Broken Web Applications is a collection of deliberately vulnerable applications to practice pen testing on.

Filter by
Sorted by
Tagged with
12
votes
4answers
7k views

SQL Injection Escaping Challenge Security Shepherd

I am using Security Shepherd as a training tool and I am now in the challenge, SQL Injection Escaping Challenge. The Challenge: When I make a query just like the one above (just with different ...
3
votes
1answer
615 views

How do I use sqlmap to dump the OWASP Juice Shop schema?

I cannot seem to get sqlmap to successfully exploit and retrieve schema information from OWASP's deliberately vulnerable Juice Shop web application. I've tried to be very specific in my sqlmap ...
2
votes
2answers
1k views

What are the common features to identify XSS attack from Apache log file?

I have tried some XSS vulnerability on web application such as webgoat, OWASP mutillidae, bWAPP. I want to know the features/keywords/footprints of cross site scripting attack in apache log file and ...
1
vote
3answers
1k views

Injecting <script>alert(“1”)</script> to OWASP Juice shop doesn't work

I've just learned the theory behind XSS attacks and now I would like to test my knowledge in a legal way. I wanted to "hack" OWASP Juice shop by following steps from this book section "Perform a ...
1
vote
1answer
5k views

SQLMAP unable to upload the stager file with 404 error

I can't get to upload the stager file on the OWASP BWA document root (/var/wwww/WackoPicko/users). I am not sure how to troubleshoot this error. root kali:~# sqlmap -u "http://x.x.x.x/WackoPicko/...
1
vote
1answer
165 views

What are the risks of publicly hosting OWASP Juice shop

For those who don't know it: The Juice shop is an intentionally vulnerable webshop which 'supports' SQL injection, XSS, DoS and all this kind of nasty stuff. It's nice to run on localhost and play a ...
0
votes
1answer
616 views

bWAPP- SQL injection Hack displays a white screen?

I've been following this video(https://www.youtube.com/watch?v=XDCZ8FC856s) to install bWAPP on Parrot OS and everything works fine except SQL Injection. I've checked the database and its active. As ...