digininja / DVWA

A deliberately vulnerable PHP/MariaDB web app for practicing common web security flaws across adjustable difficulty levels.