← Directory

BWAPP

bWAPP (buggy Web Application) is a free, open-source deliberately insecure web application containing over 100 injectable vulnerabilities covering all OWASP…

  • Other
  • Tools & Utilities
bWAPP (buggy Web Application) is a free, open-source deliberately insecure web application containing over 100 injectable vulnerabilities covering all OWASP Top 10 risks. It helps security professionals, developers, and students discover, exploit, and remediate web vulnerabilities as part of penetration testing and ethical hacking practice.

Platform availability

Available on 1 of 6 install platforms

  • Unraid
  • TrueNAS (not listed)
  • Umbrel (not listed)
  • ZimaOS (not listed)
  • Proxmox (not listed)
  • Helm (not listed)

Also on Docker Hub and GitHub

Health score

14/100 Low

Maintained
0last commit 1758 days ago
Popular
187 GitHub stars
Easy to install
351 install platform, install notes, Docker image
Light to run
No data

Based on 3 of 4 factors.

How is this calculated?

A 0-100 score computed nightly from four factors: maintained (40%: recent commits and steady activity), popular (25%: GitHub stars, log scale), easy to install (20%: platforms, install notes, setup guides, Docker image) and light to run (15%: minimum RAM, ARM support). Factors without data are left out and the rest are rescaled.

Availability: platform listings confirmed today, links checked 3 days ago

GitHub stars
7
Open issues
1
Last commit
2021-12-16
License
GPL-3.0
Activity
stale

Checked yesterday - source: GitHub (ajpalok/bWAPP)

Resources & Compatibility

ARM (e.g. Raspberry Pi) is not supported.

Checked 10 days ago - source: Docker Hub image tags and published docs

First-install notes

  • Initial Setup After deploying bWAPP, open http://<your-server>/install.php in a browser to run the database setup wizard before first use. source

Fetched yesterday - each note links to its source

Alternatives (1)

  • AppConvertly.com - AppConvertly.com - convert your website to Android and iOS app online.

Checked 7 days ago - source: AlternativeTo

Common questions

Is it safer to get and run bWAPP in an isolated environment?

Community advice says to get it from a reputable source or run it in an isolated VM.

What post-installation concerns does the Linux bWAPP guide address?

It covers service management, verification steps, and solutions to common installation problems.

Which database task is mentioned in bWAPP setup discussions?

Initializing the database is mentioned as part of setup.

What exploitation notes are available in a public bWAPP walkthrough?

The walkthrough documents exploit code, payloads, and notes covering SQL injection, XSS, CSRF, RCE, and more.

Answers sourced from github.com, medium.com, www.reddit.com, www.reddit.com

Community

Collected 9 days ago - public community threads