Difference between revisions of "DVWA"
Jump to navigation
Jump to search
Onnowpurbo (talk | contribs) (→XSS) |
Onnowpurbo (talk | contribs) |
||
| (7 intermediate revisions by the same user not shown) | |||
| Line 5: | Line 5: | ||
==Lebih Lanjut== | ==Lebih Lanjut== | ||
| + | * [[DVWA: instalasi Ubuntu 26.04]] | ||
* [[DVWA: instalasi Ubuntu 16.04]] '''RECOMMENDED''' | * [[DVWA: instalasi Ubuntu 16.04]] '''RECOMMENDED''' | ||
* [[SQLMap: Instalasi DVWA]] | * [[SQLMap: Instalasi DVWA]] | ||
| Line 22: | Line 23: | ||
===SQL=== | ===SQL=== | ||
| − | |||
* [[DVWA: Check SQLi vulnerability]] | * [[DVWA: Check SQLi vulnerability]] | ||
| Line 35: | Line 35: | ||
* [[DVWA: XSS]] | * [[DVWA: XSS]] | ||
| + | * [[DVWA: Upload PHP Backdoor]] - menggunakan metasploit | ||
| − | === | + | ===LFI / RFI / RCE=== |
| − | * [[DVWA: | + | * [[DVWA: File Path Traversal and File Inclusions(LFI / RFI)]] |
| + | * https://www.exploit-db.com/papers/12992 | ||
| + | * https://www.offensive-security.com/metasploit-unleashed/file-inclusion-vulnerabilities/ | ||
| + | |||
| + | ===Burpsuite=== | ||
==Youtube== | ==Youtube== | ||
| Line 50: | Line 55: | ||
* http://www.dvwa.co.uk/ | * http://www.dvwa.co.uk/ | ||
* http://www.computersecuritystudent.com/cgi-bin/CSS/process_request_v3.pl?HID=688b0913be93a4d95daed400990c4745&TYPE=SUB | * http://www.computersecuritystudent.com/cgi-bin/CSS/process_request_v3.pl?HID=688b0913be93a4d95daed400990c4745&TYPE=SUB | ||
| + | |||
| + | |||
| + | ==Pranala Menarik== | ||
| + | |||
| + | * [[DVWP]] | ||
Latest revision as of 08:14, 4 July 2026
Damn Vulnerable Web App (DVWA) adalah aplikasi web PHP / MySQL yang sangat rentan. Tujuan utamanya adalah untuk membantuan para profesional keamanan untuk menguji keterampilan dan alat-alat mereka dalam lingkungan hukum, membantu pengembang web lebih memahami proses mengamankan aplikasi web dan guru bantu / siswa untuk mengajar / belajar keamanan aplikasi web di lingkungan ruang kelas .
Lebih Lanjut
- DVWA: instalasi Ubuntu 26.04
- DVWA: instalasi Ubuntu 16.04 RECOMMENDED
- SQLMap: Instalasi DVWA
- DVWA: instalasi telnetd supaya lebih asik
- menyadap password telnet
Command Injection
Brute Force Login
SQL
- DVWA: Check SQLi vulnerability
- SQLMap: Contoh SQL Injection ke DVWA
- DVWA: perintah SQL di server DVWA RECOMMENDED
- DVWA: Exploit menggunakan Metasploit
- DVWA: SQL Injection
- DVWA: SQLi blind
- DVWA: Exploit menggunakan sqlmap RECOMMEND
XSS
- DVWA: XSS
- DVWA: Upload PHP Backdoor - menggunakan metasploit
LFI / RFI / RCE
- DVWA: File Path Traversal and File Inclusions(LFI / RFI)
- https://www.exploit-db.com/papers/12992
- https://www.offensive-security.com/metasploit-unleashed/file-inclusion-vulnerabilities/
Burpsuite
Youtube
- https://youtu.be/JKsF7D089t4 - Instalasi DVWA 1.9 di Ubuntu Server 16.04
Referensi
- http://www.dvwa.co.uk/
- http://www.computersecuritystudent.com/cgi-bin/CSS/process_request_v3.pl?HID=688b0913be93a4d95daed400990c4745&TYPE=SUB