exploitation DVWA with SQL Ijection

first the DVWA security set at low

and than choose SQL Injection and try input user id example '1' and submit, will display an error

and than copy the URL, cookie and Surname User ID

copy into the command sqlmap

and than we get the database

write command to find user and passwoed

and we get the password encrypt

with the help md5converse.com we can find the password