Questions tagged [owasp-bwa]
OWASP Broken Web Applications is a collection of deliberately vulnerable applications to practice pen testing on.
9
questions
-1
votes
1answer
114 views
Can't bypass filter [closed]
Trying some malicious injection against bWAPP and came across bypass captcha
Filter validating captcha is
if($_POST["captcha_user"] == $_SESSION["captcha"])
Tried input 1' || '2 ...
0
votes
1answer
86 views
SQLMAP Redirect using xampp
I am learning SQLi using sqlmap and xampp.
I set up my lab the same way as per tutorial but when I run
sqlmap.py -u "http://localhost/bwapp/sqli_1.php?title=1*"
the error got 302 redirected to
...
4
votes
1answer
2k views
How do I use sqlmap to dump the OWASP Juice Shop schema?
I cannot seem to get sqlmap to successfully exploit and retrieve schema information from OWASP's deliberately vulnerable Juice Shop web application.
I've tried to be very specific in my sqlmap ...
1
vote
1answer
227 views
What are the risks of publicly hosting OWASP Juice shop
For those who don't know it: The Juice shop is an intentionally vulnerable webshop which 'supports' SQL injection, XSS, DoS and all this kind of nasty stuff. It's nice to run on localhost and play a ...
1
vote
2answers
3k views
What are the common features to identify XSS attack from Apache log file?
I have tried some XSS vulnerability on web application such as webgoat, OWASP mutillidae, bWAPP. I want to know the features/keywords/footprints of cross site scripting attack in apache log file and ...
1
vote
3answers
3k views
Injecting <script>alert(“1”)</script> to OWASP Juice shop doesn't work
I've just learned the theory behind XSS attacks and now I would like to test my knowledge in a legal way.
I wanted to "hack" OWASP Juice shop by following steps from this book section "Perform a ...
0
votes
1answer
1k views
bWAPP- SQL injection Hack displays a white screen?
I've been following this video(https://www.youtube.com/watch?v=XDCZ8FC856s) to install bWAPP on Parrot OS and everything works fine except SQL Injection. I've checked the database and its active. As ...
12
votes
4answers
9k views
SQL Injection Escaping Challenge Security Shepherd
I am using Security Shepherd as a training tool and I am now in the challenge, SQL Injection Escaping Challenge.
The Challenge:
When I make a query just like the one above (just with different ...
1
vote
1answer
6k views
SQLMAP unable to upload the stager file with 404 error
I can't get to upload the stager file on the OWASP BWA document root
(/var/wwww/WackoPicko/users). I am not sure how to troubleshoot this error.
root kali:~# sqlmap -u "http://x.x.x.x/WackoPicko/...
