> For the complete documentation index, see [llms.txt](https://cas-cyber.gitbook.io/cas-cybersecurity/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cas-cyber.gitbook.io/cas-cybersecurity/web-application-security/dvwa.md).

# DVWA

### Exercises

* [DVWA Exercises 1](/cas-cybersecurity/web-application-security/dvwa/dvwa-exercises-1.md) (Bruteforce Attack)
* [DVWA Exercises 2](/cas-cybersecurity/web-application-security/dvwa/dvwa-exercises-2.md) (Command Injection, Reverseshell)
* [DVWA Exercises 3](/cas-cybersecurity/web-application-security/dvwa/dvwa-exercises-3.md) (CSRF, Fileinclusion)
* [DVWA Exercises 4](/cas-cybersecurity/web-application-security/dvwa/dvwa-exercises-4.md) (Remote Fileinclusion, Fileupload vulnerability)
* [DVWA Exercises 5](/cas-cybersecurity/web-application-security/dvwa/dvwa-exercises-5.md) (SQL Injection basic and union,DB enumerationm,PW hash cracking)
* [DVWA Exercises 6](/cas-cybersecurity/web-application-security/dvwa/dvwa-exercises-6.md) (Blind SQL Injection, SQLmap)
* [DVWA Exercises 7](/cas-cybersecurity/web-application-security/dvwa/dvwa-exercises-7.md) (Weak session id)
* [DVWA Exercises 8](/cas-cybersecurity/web-application-security/dvwa/dvwa-exercises-8.md) (DOM based XSS, Reflected XSS, Stored XSS)