DIWA

DIWA (Deliberately Insecure Web Application) is a deliberately unsafe web application designed to be used for security training and education. It provides users with a practical platform where they can learn and test various cybersecurity threats and vulnerabilities, including but not limited to: - Cross-site Scripting (XSS) - brute force attacks - SQL injection - Cross-site Request Forge (CSRF) - session fixation - Sensitive data exposure - session hijacking - local file inclusion - path traversal DIWA is designed to help security researchers, developers, and students understand common security threats such as the OWASP Top Ten and improve their cybersecurity skills through practical actions. The source code of the application is available on GitHub, and users can run the application by manual installation or using the Docker container. You can register yourself and use it, registration code: 3702. DIWA provides multiple ways to reset its database so that users can test and learn repeatedly. The application is released under an MIT license and allows users to freely modify and distribute code.