OW

OWASP/OWASP-VWAD

:warning: This repo is no longer in use. Please refer to https://github.com/OWASP/www-project-vulnerable-web-applications-directory

appsec owasp vulnerable vulnerable-web-app vulnerable-web-application

OWASP-VWAD

2024-10-26

⚠️ This repo is being wound down. Future work should be via www-project-vulnerable-web-applications-directory

The OWASP Vulnerable Web Applications Directory Project (VWAD, https://owasp.org/www-project-vulnerable-web-applications-directory/) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.

The individual collections are available via separate tabs on: https://owasp.org/www-project-vulnerable-web-applications-directory/

On this page

Contributors

KI BK RA PS DE YR AR NO CO PR

Apache License 2.0

Created October 21, 2013

Updated March 2, 2026