About

Damn Vulnerable Web Application (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and aid teachers/students to teach/learn web application security in a class room environment

Pre-August 2020, All material is copyright 2008-2015 RandomStorm & Ryan Dewhurst.

Ongoing, All material is copyright Robin Wood and probably Ryan Dewhurst.

Links

• Project Home: https://github.com/digininja/DVWA
• Bug Tracker: https://github.com/digininja/DVWA/issues
• Wiki: https://github.com/digininja/DVWA/wiki

Credits

• Brooks Garrett: www.brooksgarrett.com
• Craig
• g0tmi1k: g0tmi1k.com
• Jamesr: www.creativenucleus.com
• Jason Jones
• RandomStorm
• Ryan Dewhurst: wpscan.com
• Shinkurt: www.paulosyibelo.com
• Tedi Heriyanto: tedi.heriyanto.net
• Tom Mackenzie
• Robin Wood: digi.ninja
• Zhengyang Song: songzy12

License

Damn Vulnerable Web Application (DVWA) is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

Development

Everyone is welcome to contribute and help make DVWA as successful as it can be. All contributors can have their name and link (if they wish) placed in the credits section. To contribute pick an Issue from the Project Home to work on or submit a patch to the Issues list.