DownloadDamn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and aid teachers/students to teach/learn web application security in a classroom environment. The aim of DVWA is to practice some of the most common web vulnerabilities, with various levels of difficulty, with a simple straightforward interface. Please note, there are both documented and undocumented vulnerabilities with this software. This is intentional. You are encouraged to try and discover as many issues as possible. Damn Vulnerable Web Application is damn vulnerable! Do not upload it to your hosting provider's public html folder or any Internet facing servers, as they will be compromised. It is recommended using a virtual machine (such as VirtualBox or VMware), which is set to NAT networking mode.
Features
- While there are various versions of DVWA around, the only supported version is the latest source from the official GitHub repository
- This file is available in multiple languages
- The easiest way to install DVWA is to download and install XAMPP if you do not already have a web server setup
- Depending on your Operating System, as well as version of PHP, you may wish to alter the default configuration
- The aim of DVWA is to practice some of the most common web vulnerabilities
- You are encouraged to try and discover as many issues as possible
Project Samples
