Passive reconnaissance on DVWA reveals SQL injection vulnerabilities. Complete walkthrough of enumeration, payload testing, and data extraction techniques.