6 - Insecure Captcha (low/med/high) - Damn Vulnerable Web Application (DVWA)

Поделиться
HTML-код
  • Опубликовано: 27 ноя 2024

Комментарии • 16

  • @pawelk3k
    @pawelk3k Год назад +1

    I don't know if I'm doing something wrong but even when I change the password in the form correctly, the password to the application does not change:< Even when I get a response from the server that the password has been changed. Despite this, I managed to get through all 3 levels. Thx CryptoCat

  • @estefaneoliveira8387
    @estefaneoliveira8387 2 года назад +1

    that's awesome, thanks for the help!

  • @safenatsafenat9468
    @safenatsafenat9468 2 года назад +1

    Thanks for the videos.
    Can DVWA be scanned with automated assessment tools and catch any vulnerabilities? or this app is only for training on it?

    • @_CryptoCat
      @_CryptoCat  2 года назад

      For sure you could! You'll need to make sure they have the PHPSESSID in order to login. Let me know how it goes if you try (and which tool you used) 😊

  • @BieAnimation
    @BieAnimation 3 года назад +1

    Excellent explanation!

  • @haireeizzam6349
    @haireeizzam6349 2 года назад +1

    Is it possible to configure the recaptcha when you are using docker to deploy dvwa? Since i'm not finding any config file that brings me to config.inc.php

    • @_CryptoCat
      @_CryptoCat  2 года назад

      It should be possible but if DVWA is inside a docker container, you'll need to look for the config file *inside* the container, rather than on your host/VM system.

  • @alhadjhabiballah5080
    @alhadjhabiballah5080 2 года назад +1

    thanks

  • @sreeko1
    @sreeko1 2 года назад

    can I know what version of XAMPP is being used here? The latest PHP version doesn't run the command localhost on my PC so I downgraded to 5x, it ran but I'm not getting any Captcha like on 5:06, I simply get a tick without any captcha verification then after clicking on change it says that it has failed.

    • @_CryptoCat
      @_CryptoCat  2 года назад

      ermm I recorded this about a year ago, don't have the same VM now so not sure on versions. Did you go through the captcha setup stuff at the start without any issues?

    • @sreeko1
      @sreeko1 2 года назад +2

      @@_CryptoCat I figured it out! It was XAMPP, I was sure about it since I've had a lot of trouble with it, as I'm a beginner. Firstly I had installed the latest PHP, 8.1.2 but the localhost command didn't work on it then I installed 5.6.40, it worked but like I said, I'm having trouble with captcha, looks like 5.x is outdated for captchas, so currently I've installed 7.4.27 and everything works well now, which is a big relief. And your video was really helpful I've got to learn the three levels, Thanks!

    • @_CryptoCat
      @_CryptoCat  2 года назад +1

      @@sreeko1 awesome! thanks for posting solution, it will help others who run into the same issue 🥰

  • @GJRahul-rr3uk
    @GJRahul-rr3uk 6 месяцев назад +1

    Do we need to login to Google Account?

    • @_CryptoCat
      @_CryptoCat  6 месяцев назад

      Been a while since I made these but I don't believe so

    • @GJRahul-rr3uk
      @GJRahul-rr3uk 6 месяцев назад

      @@_CryptoCat Thanks!