s4n7h0/xvwa
XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security. observed · 2026-08-28
Health v2 · maintenance only
10/100
- Activity 0
- Release rhythm 35
- Longevity 100
Flags: no_releases archived
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.
- gap_med: n/a
- age_days: 3972
- days_rel: n/a
- days_push: 2181
- n_releases_24m: 0
Adoption not part of the score
1763 stars · 363 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
XVWA (Xtreme Vulnerable Web Application) is an intentionally insecure PHP/MySQL web application for learning application security. It contains hands-on exercises covering SQL injection, XSS, CSRF, file upload flaws, SSRF, SSTI, and many other common web vulnerabilities.
Use cases
- practice exploiting sql injection in a safe lab
- learn web application security hands-on
- test security scanners against known vulnerabilities
- train a team on owasp top 10 vulnerabilities
- set up a local hacking practice environment
- learn xss csrf and ssrf exploitation
When to choose
- you want a deliberately vulnerable app to practice offensive security techniques
- you are teaching or learning web application security fundamentals
- you need a legal target for testing security tools like burp suite or sqlmap
When to avoid
- you need a secure production or public-facing web application
- you want modern PHP code or a maintained framework
- you are not able to host it in an isolated local environment
Facets
application · maturity maintenance
security web-framework developer-tools security penetration-testing web-development education windows self-hosted vulnerable-web-app appsec-training sql-injection xss csrf php-mysql security-practice ctf education linux macos web-server
1 source
- readme: https://github.com/s4n7h0/xvwa · fetched 2026-08-28 · a85ed950d7f4
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| s4n7h0/xvwa | main | 10 |
For agents
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem