{"id":1913,"date":"2009-07-15T08:39:59","date_gmt":"2009-07-15T08:39:59","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=1913"},"modified":"2015-09-09T19:38:00","modified_gmt":"2015-09-09T11:38:00","slug":"damn-vulnerable-web-app-learn-practise-web-hacking","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2009\/07\/damn-vulnerable-web-app-learn-practise-web-hacking\/","title":{"rendered":"Damn Vulnerable Web App &#8211; Learn &#038; Practise Web Hacking"},"content":{"rendered":"<p>Damn Vulnerable Web App (DVWA) is a PHP\/MySQL web application that is damn vulnerable. Its main goals are to be light weight, easy to use and full of vulnerabilities to exploit. Used to learn or teach the art of web application security.<\/p>\n<p><strong>Vulnerabilities<\/strong><\/p>\n<ul>\n<li>SQL Injection<\/li>\n<li>XSS (Cross Site Scripting)<\/li>\n<li>LFI (Local File Inclusion)<\/li>\n<li>RFI (Remote File Inclusion)<\/li>\n<li>Command Execution<\/li>\n<li>Upload Script<\/li>\n<li>Login Brute Force<\/li>\n<\/ul>\n<p><strong>Changes<\/strong><\/p>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<ul>\n<li>Added Acunetix scan report.<\/li>\n<li>All links use http:\/\/hiderefer.com to hide referrer header.<\/li>\n<li>Updated\/added \u2018more info\u2019 links.<\/li>\n<li>Moved change log info to CHANGELOG.txt.<\/li>\n<li>Fixed the exec.php UTF-8 output.<\/li>\n<li>Moved Help\/View source buttons to footer.<\/li>\n<li>Fixed phpInfo bug. <\/li>\n<li>Made DVWA IE friendly.<\/li>\n<li>Fixed html bugs.<\/li>\n<li>Improved README.txt and fixed typos.<\/li>\n<li>Made SQL injection possible in sqli_med.php.<\/li>\n<\/ul>\n<p><strong>WARNING<\/strong><\/p>\n<p>It should come as no shock..but this application is damn vulnerable! Do not upload it to your hosting provider\u2019s public html folder or any working web server as it will be hacked. It&#8217;s recommend that you download and install XAMP onto a local machine inside your LAN which is used solely for testing.<\/p>\n<p>You can download DVWA 1.0.4 here:<\/p>\n<p><a href=\"http:\/\/sourceforge.net\/projects\/dvwa\/files\/dvwa\/dvwa_v1.0.4.zip\/download\">dvwa_v1.0.4.zip<\/a><\/p>\n<p>Or read more <a href=\"http:\/\/sourceforge.net\/projects\/dvwa\/\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Damn Vulnerable Web App (DVWA) is a PHP\/MySQL web application that is damn vulnerable. Its main goals are to be light weight, easy to use and full of vulnerabilities to exploit. Used to learn or teach the art of web application security. Vulnerabilities SQL Injection XSS (Cross Site Scripting) LFI (Local File Inclusion) RFI (Remote [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[10,29,15],"tags":[295,1602,4177,270,267,4178,296,6329,4966,396,376],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/1913"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=1913"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/1913\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=1913"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=1913"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=1913"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}