DVWA - File upload
Send files to get some shells
DVWA
Recent Posts
DVWA - File inclusion
Direct access to hidden assets
DVWA - CSRF
Manipulate your targets
DVWA - Brute force
Find the password
DVWA - SQL injection
Extract the database by changing your username
DVWA - Command Injection
Think outside the box when passing parameters
DVWA - CSP Bypass
Discover how third party code can get you pwned