DVWA
Principle:
Malicious attackers insert malicious executable web script code into web pages. When users browse these pages, the embedded script code inside the web pages will be executed, allowing attackers to steal user information or violate user security and privacy.
Stored - Medium difficulty
Type:
Reflected
Stored
DOM-based, with stored type being the most harmful
Exploitation:
easy:
medium: <img src="1" onerror=alert("123")>
high: <img src="1" onerror=alert("123")>
[面包]MrTwoC
你好，欢迎来到这个基于区块链的个人博客
名字：面包 / MrTwoc
爱好：跑步(5/10KM)、拿铁咖啡、游戏(Minecraft、Warframe、CS)
兴趣方向：Rust、区块链、图形学、游戏设计与开发
