Archive for Dev. (junyup2)

์ง€์‹์„ ์ฑ„์›Œ๊ฐ€๋Š” ใ€Ž๊ฐœ๋ฐœ์ž/ํ™”์ดํŠธํ•ด์ปคใ€๋ฅผ ๋ชฉํ‘œ๋กœ ์ •๋ฆฌํ•˜๋Š” ๋ธ”๋กœ๊ทธ

Practice/DVWA

[DVWA] DVWA Security Level

Gearvirus(junyup2) 2024. 4. 7. 22:59

DVWA Security Level

https://securingninja.com/dvwa-hacking-tutorial/

DVWA Security Levels

How many security levels are there in DVWA?

There are 4 security levels in DVWA. These range from LOW to IMPOSSIBLE and set the difficulty for attacking the application. The security levels also reveal how specific issues can be coded more securely.

 

LOW (๋‚ฎ์Œ)

This security level is completely vulnerable and has no security measures at all. It is meant to be an example of how web application vulnerabilities manifest through bad coding practices.

(๋ณด์•ˆ ์กฐ์น˜๊ฐ€ ์ „ํ˜€ ์—†์œผ๋ฉฐ, ์›น ์‘์šฉ ํ”„๋กœ๊ทธ๋žจ์˜ ์ทจ์•ฝ์ ์ด ์ž˜๋ชป๋œ ์ฝ”๋”ฉ์„ ํ†ตํ•ด ์–ด๋–ป๊ฒŒ ๋‚˜ํƒ€๋‚˜๋Š”์ง€ ๋ณด์—ฌ์ฃผ๋Š” ์˜ˆ์‹œ์ด๋‹ค.)

 

MEDIUM (์ค‘๊ฐ„)

This level is more difficult than low and illustrates bad security practices, where the developer has tried but failed to secure an application. This level will require more sophisticated exploitation techniques.

(๋‚ฎ์€ ์ˆ˜์ค€๋ณด๋‹ค๋Š” ๋” ์–ด๋ ต๊ณ  ๊ฐœ๋ฐœ์ž๊ฐ€ ์• ํ”Œ๋ฆฌ์ผ€์ด์…˜์„ ๋ณด์•ˆํ•˜๋ ค๊ณ  ์‹œ๋„ํ–ˆ์ง€๋งŒ ์‹คํŒจํ•œ ๋‚˜์œ ๋ณด์•ˆ ์˜ˆ์‹œ๋ฅผ ๋ณด์—ฌ์ค€๋‹ค. ์ด ์ˆ˜์ค€์—์„œ๋Š” ๋ณด๋‹ค ์ •๊ตํ•œ ์•…์šฉ ๊ธฐ์ˆ ์ด ํ•„์š”ํ•˜๋‹ค.)

 

HIGH (๋†’์Œ)

This option is an extension to the medium difficulty, with a mixture of harder or alternative bad practices to attempt to secure the code. The vulnerability may not allow the same extent of exploitation.

(์ฝ”๋“œ ๋ณด์•ˆ์„ ์‹œ๋„ํ•˜๊ธฐ ์œ„ํ•ด ๋” ์–ด๋ ค์šด, ๋˜๋Š” ๋Œ€์•ˆ์ ์ธ ์ž˜๋ชป๋œ ๋ณด์•ˆ์ด ํ˜ผํ•ฉ๋˜์–ด ์žˆ๋‹ค.)

 

IMPOSSIBLE (๋ถˆ๊ฐ€๋Šฅ)

This level should be secure against all vulnerabilities. It is used to compare the vulnerable source code to the secure source code.

(๋ชจ๋“  ์ทจ์•ฝ์ ์œผ๋กœ๋ถ€ํ„ฐ ์•ˆ์ „ํ•˜๋„๋ก ์„ค๊ณ„๋˜์–ด์žˆ์œผ๋ฉฐ, ์ทจ์•ฝํ•œ ์†Œ์Šค์ฝ”๋“œ๋ฅผ ๋ณด์•ˆ ์†Œ์Šค์ฝ”๋“œ์™€ ๋น„๊ตํ•˜๋Š”๋ฐ ์‚ฌ์šฉ๋œ๋‹ค.)