vulnerable webapp helps you to test your skills in penetration testing or learn penetration testing and help developers better understand the processes of securing web applications . This application has been created for beginner users and teachers to teach/learn web application security. feel free to edit/add some codes to this application.
Do not upload it to your hosting providers public html folder or any internet facing web server as it will be compromised. We recommend downloading and installing XAMPP or WAMP onto a local machine inside your LAN which is used solely for testing.
- Sql Injection
- Blind Sql Injection
- Authentication Bypass
- XSS Stored
- XSS Reflected
- File Upload
- Cross Site Request Forgery
- Remote File Inclusion
- Local File Disclosure/Download
- Remote Code Execution
- Remote Command Execution
- PHP Object Injection
For installation enter your mysql database information in config/config.php