Reflected XSS → DVWA Walkthrough: Learn How User Input Can Trigger a Script Execution 🕵Hey! I’m Adwaith, an aspiring offensive security enthusiast, and I’m excited to walk you through the …

InfoSecWriteUps' platform is  dedicated to providing insights and resources for cybersecurity professionals and enthusiasts. Through articles, tutorials, and security research, InfoSecWriteUps offers insights into cybersecurity vulnerabilities, attack techniques, and defense strategies. Readers can learn about penetration testing, threat intelligence, and incident response to enhance their cybersecurity knowledge and skills.

InfoSec Write-ups

A hands-on walkthrough of reflected cross-site scripting (XSS) vulnerabilities using DVWA (Damn Vulnerable Web Application). Covers fundamental web concepts like HTML, JavaScript, cookies, and sessions before demonstrating XSS attacks across four security levels. Shows how user input can execute malicious scripts, explains payload crafting techniques, filter bypass methods, and proper mitigation strategies using input sanitization and CSRF tokens.

Reflected XSS → DVWA Walkthrough: Learn How User Input Can Trigger a Script Execution

Cross-Site Scripting (XSS) Cheat Sheet - 2025 Edition | Web Security Academy

XSS Filter Evasion - OWASP Cheat Sheet Series