Cyber Security Lab

How to Use OWASP ZAP to Automatically Scan and Test Web Vulnerabilities.

December 7, 2025 Rifa Sanjida

The article describes how ZAP can help new and experienced security testers investigate how websites are secured and compromised. Since Kali Linux already has most of the security tools, it served as the primary environment for this experiment. DVWA (Damn Vulnerable Web Application) was set up as a deliberately weak web app for vulnerability testing. […]

Read More

From Input to UNION: DVWA SQL Injection Case Study in 2025

December 1, 2025 Jannatul Masruk Mukta

What is SQL Injection? SQL Injection (SQLi) is a cyber attack technique that allows an attacker to interfere with the queries that an application makes to its database.It happens when untrusted user input is directly included in an SQL query without proper validation or sanitization. Attackers insert malicious SQL code into input fields(login form,URL parameter).If […]

Read More