What is Penetration Testing ?
Penetration testing is a practice of learning hacking skills against Web
Applications, Mostly White hat hackers or IT Security Team create a
Penetration lab to practice their hacking tools, tricks and even to
prevent hacking. Even beginner hacker also want to learn hacking skills
like SQL Injection, XSS, CSRF attack etc, this all hacking tricks
require a vulnerable website to Explode the Vulnerability and to learn
hacking skill
Applications, Mostly White hat hackers or IT Security Team create a
Penetration lab to practice their hacking tools, tricks and even to
prevent hacking. Even beginner hacker also want to learn hacking skills
like SQL Injection, XSS, CSRF attack etc, this all hacking tricks
require a vulnerable website to Explode the Vulnerability and to learn
hacking skill
What is DVWA ? (Damn Vulnerable Web App)
Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is
damn vulnerable. Its main goals are to be an aid for security
professionals to test their skills and tools in a legal environment,
help web developers better understand the processes of securing web
applications and aid teachers/students to teach/learn web application
security in a class room environment.
damn vulnerable. Its main goals are to be an aid for security
professionals to test their skills and tools in a legal environment,
help web developers better understand the processes of securing web
applications and aid teachers/students to teach/learn web application
security in a class room environment.
Let’s Get Stated
1. Download DVWA HERE- > DVWA
2.Download Xamp here > Xamp
3.After Download Both File install Xamp and open control panel and start Apache and MySQL
4. Extract Dvwa in C:\xampp\htdocs
5.goto C:\xampp\htdocs\dvwa\config and open the config.inc file with notepad or notepad++
6. Open your browser and type localhost/dvwa >create database.
then your done…..
7. in the same browser just open Ntab and type: http://localhost/dvwa/Login.php
username :admin
password : password…
For Educational Purpose only
.png)
.png)