How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
The main features of s4n7h0/xvwa are: Vulnerable Web Applications, Vulnerable Applications.
Projects with overlapping indexed features include: hackademic/hackademic — the main hackademic code repository. snoopysecurity/dvws — Damn Vulnerable Web Services is an insecure web application with multiple vulnerable web service components that can… audi-1/sqli-labs — sqli-labs is a collection of intentionally vulnerable web applications and sandbox environments designed for… himadriganguly/sqlilabs — Lab set-up for learning SQL Injection Techniques. adamdoupe/wackopicko — WackoPicko is a vulnerable web application used to test web application vulnerability scanners. dobin/sentineltestbed — Vulnerable web site. Used to test sentinel features.
Damn Vulnerable Web Services is an insecure web application with multiple vulnerable web service components that can be used to learn real world web service vulnerabilities. NOTE: This project is out of date, please use https://github.com/snoopysecurity/dvws-node
sqli-labs is a collection of intentionally vulnerable web applications and sandbox environments designed for practicing the identification and exploitation of SQL injection vulnerabilities. It serves as a cybersecurity education lab where users can experiment with database exploits in a controlled setting. The environment provides specialized modules for testing a wide range of attack vectors, including error-based, boolean-blind, and time-based injections. It specifically covers advanced techniques such as second-order injections, stacked queries, and attacks targeting HTTP headers. The pro
