OWASP Vulnerable Web Applications Directory

Featured app

A random pick from the directory - refresh the page for another.

Collections

Technology

Browse & search

Discover apps with basic filters or advanced search options.

Search type

Search by app name or author, with up to one collection, one technology, and one category filter.

Advanced search supports keyword search, multi-value filters for collections, technologies, categories, and references, AND/OR matching, GitHub stars, and last contributed year ranges.

Keyword

Collection

Technology

About VWAD

The OWASP Vulnerable Web Applications Directory (VWAD) Project is a well-maintained registry of vulnerable web and mobile applications available for security professionals. Use them for training, tool testing, and practice in realistic environments.

Applications are classified as Online, Offline, Mobile, Containerized (Docker, VMs, ISOs), or Platform.

Contributors

Thanks to everyone who has contributed to the directory and this site across the project repositories.

Loading…