DVWA
DVWA copied to clipboard
file inclusion error
Questions here may or may not be answered depending on the state of the question, to increase your chance, read this before asking Asking For Technical Help.
Basically, the more details you give, the more chance of getting an answer. We need at least:
-
Where did you get DVWA from?
-
github
-
What OS are you installing it on?
-
Ubuntu 18.04.6 LTS
-
Last five lines from the web server access and error log from the time the error occurred if you got that far. [-] Tested URL: http://localhost/DVWA/vulnerabilities/fi/?page=../../../../../../../etc/passwd (Not Vulnerable)
Notice: Array to string conversion in /var/www/html/DVWA/dvwa/includes/dvwaPage.inc.php on line 77 -
The error you got when you got stuck.
I write a python script to detect path travelsal vulnerabilities ,and it report Array to string conversion error.
my setup is in following picture
- Any previous errors.
- no.
- What you have tried to do yourself to fix the problem.
at first i use dotdotslash(another github project which can detect path travelsal), and it report Array to string conversion error.
Then i try to put payload in url, and it works.
then i wrote a python script using chatgpt, trying to found if its dotdotslash's problem, but it shows the same error,
Support will only be given for users running the latest pull of code from GitHub. Not a tagged release, not a pre-installed app, not a ZIP you got from a mate.