Vulnerable Web Applications

Deliberately insecure web applications designed for security training, penetration testing practice, and vulnerability demonstration.

by The Linux Foundation

・

5 projects ・ Updated 14 Mar 2025

Only Linux Foundation projects

Project

Contributors

Organizations

Software value

OWASP Juice Shop

1,446

189

$4.2M

WebGoat

1,097

125

$3M

Damn Vulnerable Web Application (DVWA)

804

$572K

RailsGoat

161

$808K

OWASP WrongSecrets

123

$973K

Looking for a project that’s not listed?