Collaborate Disseminate
I’m doing an assignment related to web brute forcing with hydra.
Asked to brute force the http://192.168.56.101/dvwa.login.php with hydra but can’t find out why it didn’t work. Is there any issue with my command?
hydra -l admin -P /home/k… Continue reading Brute Forcing DVWA login.php with hydra [closed]
I am working on the DVWA’s CSRF lab with the security setting to low. The DVWA is running on localhost:4280. The SameSite cookie attribute is not set (to Lax or Strict), and thus cross-site requests should be possible.
On http://localhost:… Continue reading CSRF not sending correct cookie (Damn Vulnerable Web App test)
I have Kali Linux running as a host OS. I was having problems with VirtualBox so I decided to install DVWA on the same Kali installation. Right now I am practicing File Upload vulnerabilities.
The question is, does this solution make sense… Continue reading Can I run DVWA on my attacker machine?
I am currently using XAMPP installed on windows to do a brute-force attack to DVWA. The command prompt that I used is Ubuntu, but the virtual machine is not opened and installed. Just a command prompt from Ubuntu that opened at Windows.
I … Continue reading Brute-Force by using XAMPP on windows, Ubuntu installed in Windows and DVWA
I tried everything, I followed a tutorial https://www.youtube.com/watch?v=lGeSQ7STHaE&ab_channel=CartesianCaramel I did the exact same thing.
Why does hydra return wrong and random passwords for this command?
sudo hydra 172.17.0.2 http… Continue reading Hydra returning random and wrong password [duplicate]
I’m running a DVWA container on my kali VM using:
docker run –rm -it -p 80:80 vulnerables/web-dvwa
Network interface details:
Kali docker0 int: 172.17.0.1/16
Kali eth0 int: 192.168.1.233/24
DVWA container int: 172.17.0.2/16
I set up a… Continue reading Reverse shell not working [closed]
I’m learning how to use hydra, but I found a problem.
When I run the following script, I get a CSRF token error. Apparently, the problem is that the token received in CURL is different from the one in hydra.
Step by step:
I have created th… Continue reading Brute-Forcing DVWA login page with hydra – csrf incorrect
I am trying to brute force the brute force log-in page on DVWA v1.0.7 (/dvwa/vulnerabilities/brute/)
I have been working on this for quite some time but I keep getting a bunch of false positives when I use a wordlist I created and when I u… Continue reading Brute forcing the brute force page on DVWA v1.0.7 using hydra
I have written a Python script to inject a payload through the requests library, but the payload is being added instead of injecting
xsstestscript=html.unescape("<script>alert(1)</script&am… Continue reading Failed to inject payload with Python requests library in DVWA forms
I have been playing around with the DVWA stored XSS page and wondered if someone could help.
I used XSS Validator in Burp and found numerous payloads that give a prompt, indicating that XSS is present.
One of the payloads that was successf… Continue reading XSS Payload Cookie Stealing