DVWA
Principle:
Malicious attackers insert malicious executable web script code into web pages. When users browse these pages, the embedded script code inside the web pages will be executed, allowing attackers to steal user information or violate user security and privacy.
Stored - Medium difficulty
Type:
Reflected
Stored
DOM-based, with stored type being the most harmful
Exploitation:
easy:
medium: <img src="1" onerror=alert("123")>
high: <img src="1" onerror=alert("123")>
[面包]MrTwoC
你好，欢迎来到这个基于区块链的个人博客
名字：面包 / MrTwoc
爱好：跑步(5/10KM)、咖啡、游戏(MMORPG、FPS、Minecraft、Warframe)
兴趣方向：Rust、区块链、网络安全、量子信息(量子计算)、游戏设计与开发
