Open source alternatives to DVWA
50 open source Developer Tools apps to use instead, best rated first.
Top picks
- N

NocoDB
LaunchConvert any database into a no-code platform with spreadsheet interface. Connect PostgreSQL/MySQL or use hosted database. Scale to millions of rows effortlessly.
- C

Coolify
LaunchCoolify is an open-source, self-hosted platform that lets you deploy applications, databases, and services on your own hardware or VPS. It supports Docker, static sites, and various frameworks with automatic SSL, Git integration, and one-cl
- I

Insomnia
LaunchIntuitive API client for REST, GraphQL, and gRPC. Debug, test, and collaborate on APIs with ease across platforms.
- J

Joplin
LaunchCross-platform note-taking app with end-to-end encryption, Markdown support, web clipping, and sync via Dropbox, OneDrive, or Joplin Cloud.
- M

Minio
LaunchMinIO is high-performance object storage that is fully compatible with Amazon S3, and its current enterprise product, AIStor, is built as a data and memory foundation for AI and analytics. It runs anywhere (edge, data center or cloud), stor
- P

Payload CMS
LaunchPayload CMS is a self-hosted, code-first content management system that gives developers full control over their data structure and admin UI. It combines a powerful API, flexible authentication, file uploads, and localization out of the box
Self-hosted
More Developer Tools apps
Paperless-ngx
Scan, index, and archive all of your paper documents with an improved interface
About DVWA
DVWA
Damn Vulnerable Web Application (DVWA)
Damn Vulnerable Web Application (DVWA) is a PHP and MariaDB web application that is deliberately vulnerable. Its main goal is to help security professionals test their skills and tools in a legal environment, and to help web developers understand how web applications are attacked so they can secure them. You install it on your own server or local machine and practise on the intentional weaknesses it contains. The README carries a prominent warning that the application is insecure and must not be placed on a public network or on a production server, because anyone who finds it can compromise the host. The project includes a disclaimer, a licence section and notes on internationalisation for the interface. It is on GitHub with a security policy. DVWA suits students, penetration testers and developers who want a safe lab to learn web security, such as injection and access control, and it should only be run in an isolated environment that you control.
- Price
- Free
- Made by
- digininja
- Category
- Developer Tools
- Website
- github.com/digininja/dvwa



.png?auto=compress&fit=max&w=128)






