Damn Vulnerable Web Application (DVWA) is a highly vulnerable PHP/MySQL Web application. Its main goals are to help security professionals test their skills and tools in legal environments, help Web developers better understand the process of protecting Web applications, and help students and teachers learn about Web application security in a controlled classroom environment. The purpose of DVWA is to practice some of the most common Web vulnerabilities through a simple and intuitive interface, with varying degrees of difficulty. Please note that this software has both documented and unregistered vulnerabilities. This was intentional. We encourage you to try and discover as many problems as possible. User name: admin, password: password
