Hackers can get your ass if you are using DVWA

[parad0x]

Two of my friends have found this, DVWA Exploit

Releasing The Unintended: #DVWA #Exploits.
DVWA was meant to be hacked, but no, not this way. this way, I am able to pwn your ass just because you have DVWA in your HDD.

Here is his article : http://paulosyibelo.blogspot.com/2014/09/dvwa-unintended-security-issues.html

POC : http://pastebin.com/A7WV5MbK

What do you say guys???

[Z3R0]

Wow...I need to get on those guys' levels. Those guys ability to think outside the box is astounding. Don't get me wrong, there are alot of people on this forum that think I'm uber 1337 (mainly based off of my reputation as the diabolical doctor), but I will admit with the utmost humility...I  don't know everything. These guys really made me think twice about how I look for vulnerabilities. +1 parad0x, great share.

Everyone else, I recommend looking through the POC's these guys wrote and truly try to understand what they are doing. Their methods are not *that* particularly complex, but...it's just the manner of how they went about finding these vulnerabilities. I only wish I could emulate that level of intelligence.