DISRUPTING DATABASES

In the past we’d have directed you to hack by setting up the Metasploitable virtual machine and attacking it. We’d encourage you to do that too, (you’ll find all the information you need at ). But this time around we’re going to do something different. The Damn Vulnerable Web Application (DVWA) is exactly what you might expect: it’s a PHP application riddled with security holes. It requires a LAMP (Linux Apache MySQL PHP) stack to run, and it’s certainly not the sort of thing you want to deploy on an