Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and aid teachers/students to teach/learn web application security in a class room environment.
Licence : GPL.
Attention : le niveau de sécurité activé par défaut, « impossible », empêche toute attaque. Il faut le réduire en utilisant l'interface web.
Via https://www.it-connect.fr/installation-de-mod_security-devant-un-serveur-web-apache/ .