The OWASP Vulnerable Web Applications Directory Project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.
-
Updated
Jul 8, 2025 - HTML
The OWASP Vulnerable Web Applications Directory Project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.
📧 [Research] E-Mail Injection: Vulnerable applications
OWASP Foundation Web Respository
A very silly vulnerable application to review your knowledge about basics of cybersecurity.
A vulnerable Python Flask application for OWASP TOP 10 vulnerabilities demo
vulnerable C# web application based on OWASP Top 10 2021
An intentionally vulnerable Django web application designed for hands-on security learning, testing, and training. Ideal for pentesters, developers, and educators looking to explore or teach common web application vulnerabilities in a safe, sandboxed environment.
A simple website to easily create Open Redirect attacks.
Practical group work made for Analysis and Exploration of Vulnerabilities @ UA - Portugal.
Add a description, image, and links to the vulnerable-web-app topic page so that developers can more easily learn about it.
To associate your repository with the vulnerable-web-app topic, visit your repo's landing page and select "manage topics."