DVWA

DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Application DVWA es una aplicación web hecha en PHP/MySQL que es extremadamente vulnerable. Su principal objetivo es ayudar a profesionales de seguridad a poner a prueba sus habilidades y herramientas en un entorno legal, ayudar a desarrolladore...

vulhub

Vulhub is an open-source collection of pre-built, ready-to-use vulnerable Docker environments. With just one command you can launch a vulnerable environment for security research, learning, or demonstration, no prior Docker experience required. 中文版本Chinese version Quick Start Install Docker examp...

DVWA-ZAP-PENTEST

OWASP ZAP を使用した DVWA 脆弱性評価 DVWA（Damn Vulnerable Web App） を対象とした実践的なWebアプリケーションセキュリティ評価を、OWASP ZAP（Zed Attack Proxy）2.17.0 を使用して実施しました。このプロジェクトでは、偵察（スパイダリング）、自動脆弱性スキャン、発生したアラートの分析を含む全ワークフローを文書化しています — その中には リモートコード実行（CVE-2012-1823） の発見も含まれます。 ⚠️ 免責事項: この評価は、トレーニング目的で意図的に脆弱なアプリケーションとして構築された DVWA...

Open-Worldwide-Application-Security-Project-OWASP-

Progetto-Aperto-Mondiale-di-Sicurezza-Applicativa-OWASP- Valutazione automatizzata delle vulnerabilità web del DVWA utilizzando OWASP ZAP per identificare e analizzare falle di sicurezza critiche come l'esecuzione remota di codice CVE-2012-1823...

CVE-2014-160

Exploit CVE-2014-160 Use assim: ./cve-2014-160 dvwa.local https && strings datadump.bin...

csaf

Das Cyber Security Awareness Framework CSAF ist ein strukturierter Ansatz zur Verbesserung des Cybersicherheitsbewusstseins und -verständnisses bei Einzelpersonen, Organisationen und Gemeinschaften. Es bietet Leitlinien für die Entwicklung wirksamer Cybersicherheits-Awareness-Programme und deckt...

cve-images

cve-images — immagini vulnerabili di laboratorio intenzionali Una raccolta di immagini Docker deliberatamente vulnerabili per lo studio della sicurezza in un laboratorio isolato. Iniziato come riproduzione di CVE di nginx e si sta ampliando in un set più ampio di immagini vulnerabili per...

dotdotslash

dotdotslash An tool to help you search for Directory Traversal Vulnerabilities Benchmarks Platforms that I tested to validate tool efficiency: DVWA low/medium/high bWAPP low/medium/high Screenshots Instalation You can download the last version cloning this repository root@kitploit: git clone...

Vulnerability_Assessment_and_Exploitation

VulnerabilityAssessmentandExploitation This assessment was...

dvwa-rce-finding-chain

DVWA Finding Chain: Stored XSS to Persistent RCE A pentes...

dvwa-web-attack-lab

Web Application Penetration Testing Lab Platform: Kali Li...

python-vuln-scanner

Python Vulnerability Scanner !Pythonhttps://img.shields.io...

ethical-hacking-portfolio

Ethical Hacking Portfolio - CS4069 | Spring 2026 Course:...

incident-response-lab

🔥 Incident Response Lab - SOC Toolkit !Pythonhttps://img.s...

LFI-DVWA-Lab-

LFI Exploitation – DVWA Lab 📌 Overview This project demons...

DVWA Pro-test CSRF vulnerability-vulnerability warning-the black bar safety net

CSRF is a cross-site request forgery, i.e., a user at A site after login in the same client of the Site B using the vulnerability to get A site's Cookie and other authentication information, and forgery as legitimate identity request to A site. This article in the local environment, carry out the...

DVWA - Damn Vulnerable Web Application

Damn Vulnerable Web Application DVWA is a PHP/MySQL web application that is damn vulnerable. Its main goal is to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and to aid...

PHP arbitrary file upload vulnerability-vulnerability warning-the black bar safety net

Vulnerability details: This vulnerability exists in php in a very commonly used function: the moveuploadedfiles, the developer always use this function to move the uploaded file,this function will check is upload whether the file is a legitimate filewhether it is through the HTTP post mechanism t...

PHP arbitrary file upload Vulnerability, CVE-2 0 1 5-2 3 4 8-a vulnerability warning-the black bar safety net

Security researchers today published a medium-risk vulnerabilities--PHP arbitrary file upload Vulnerability, CVE-2 0 1 5-2 3 4 8 in. In the Upload File only when the determined file name is the legal name of the file to conclude that this file is not malicious file, which will indeed lead to othe...

DVWA Cross Site Request Forgery

//document.getElementById"loader".innerHTML = 'Loading...'; var one = "createdb":'whatever'; var two = "username":"admin","password":"password","Login":"Login"; var three = "security":"low","seclevsubmit":"Submit"; //windows opens calculator; change this to whatever your desire var four =...