# DVWA-Web

DVWA-Web is a self-hosted development app. Damn Vulnerable Web Application (DVWA) is an intentionally vulnerable PHP/MariaDB web application designed for security professionals, developers, and students to practice identifying and remediating common web... It is open source and self-hosted, installable on Docker Hub and Unraid.

Canonical page: https://ourlocalhost.com/app/545/dvwa-web

## Description

Damn Vulnerable Web Application (DVWA) is an intentionally vulnerable PHP/MariaDB web application designed for security professionals, developers, and students to practice identifying and remediating common web application vulnerabilities. It provides a straightforward interface with multiple difficulty levels covering both documented and undocumented vulnerabilities, making it a legal, controlled environment for testing skills and tools.

## Platform availability

Available on 1 of 9 platforms: Unraid.

## Health score

74/100 (Good), based on 4 of 5 factors.
- Maintained: 86 (last commit 16 days ago)
- Popular: 83 (13,790 GitHub stars)
- Easy to install: 35 (1 install platform, install notes, Docker image)
- Security check: 77 (no serious findings, 1 minor, CI, tests, OpenSSF Scorecard 5.8/10)

## Links

- GitHub: https://github.com/digininja/DVWA
- Docker Hub: https://hub.docker.com/r/vulnerables/web-dvwa/
- Unraid: https://ca.unraid.net/apps/dvwa-web-1xxy62c1om14so?q=DVWA-Web
- Official website: https://dvwa.co.uk/

## Common questions

### What common setup errors should I check when DVWA pages are blank or fail?

DVWA troubleshooting for Ubuntu and Kali lists 404s, database connection failures, blank pages, missing PHP modules, and permission errors.

### Why does DVWA not display after I complete the configuration on XAMPP?

The source only reports that DVWA’s webpage did not display after completing configuration while running it with XAMPP.

### Why can’t I log out and log back into DVWA after reaching localhost/DVWA?

A Kali user reports being unable to log out and log back in after reaching DVWA at localhost/DVWA.

### What should I do if DVWA works with 127.0.0.1/DVWA but does not otherwise?

The source does not provide a fix because nobody responded to the post.

## Alternatives

- VulnHub: To provide materials that allows anyone to gain practical 'hands-on' experience in digital security, computer software & network admini…

---
Source: Our Local Host (https://ourlocalhost.com/app/545/dvwa-web), the self-hosted and open-source app directory.