Free alternatives to DVWA
50 free Developer Tools apps to use instead, best rated first.
Top picks
GitHub
LaunchHost and review code, manage projects, and build software with millions of developers.
- P

Payload CMS
LaunchPayload CMS is a self-hosted, code-first content management system that gives developers full control over their data structure and admin UI. It combines a powerful API, flexible authentication, file uploads, and localization out of the box
Self-hosted
- T
Traefik
LaunchTraefik is a cloud-native application proxy designed to simplify microservice discovery, routing, and load balancing. It enhances security and centralizes control of your APIs and microservices, making it an essential tool for modern DevOps
Self-hosted
- N

Nginx Proxy Manager
LaunchDocker container and built in Web Application for managing Nginx proxy hosts with a simple, powerful interface, providing free SSL support via Let's Encrypt.
Self-hosted
- R
revealjs
LaunchFramework for easily creating beautiful presentations using HTML. (Demo, Source Code) MIT Javascript
Self-hosted
- O

OneDev
LaunchOneDev is a comprehensive Git server that integrates CI/CD, Kanban boards, and package management all in a single platform. It aims to provide a seamless and unparalleled experience for developers and teams working on software projects.
Self-hosted
More Developer Tools apps
Paperless-ngx
Scan, index, and archive all of your paper documents with an improved interface
About DVWA
DVWA
Damn Vulnerable Web Application (DVWA)
Damn Vulnerable Web Application (DVWA) is a PHP and MariaDB web application that is deliberately vulnerable. Its main goal is to help security professionals test their skills and tools in a legal environment, and to help web developers understand how web applications are attacked so they can secure them. You install it on your own server or local machine and practise on the intentional weaknesses it contains. The README carries a prominent warning that the application is insecure and must not be placed on a public network or on a production server, because anyone who finds it can compromise the host. The project includes a disclaimer, a licence section and notes on internationalisation for the interface. It is on GitHub with a security policy. DVWA suits students, penetration testers and developers who want a safe lab to learn web security, such as injection and access control, and it should only be run in an isolated environment that you control.
- Price
- Free
- Made by
- digininja
- Category
- Developer Tools
- Website
- github.com/digininja/dvwa
.png?auto=compress&fit=max&w=128)






