DVWA File Upload

1: Open the XAMPP Control Panel.

2: Activate the Apache and MySQL.

3: Change the DVWA Security to Level Low.

4: Open the File Upload.

Link: http://localhost/dvwa/vulnerabilities/upload/

5: Download the Shell-backdoor-list zip file.

6: If the Download is not working, turn off the Real–time protection.

7: Extract the shell-backdoor-list-master folder.

8: Open the shell-backdoor-list-master folder.

9: Upload the p0wny-shell.php shell.

10: The Shell has been uploaded.

11: Copy the Uploaded Shell Address.

Address: hackable/uploads/p0wny-shell.php

12: Open the executable link.

Link: http://localhost/dvwa/hackable/uploads/p0wny-shell.php

13: The system has been hacked, and now you can execute.

Table of Contents