Damn Vulnerable Web Application (DVWA): 1.0.7


  • Name: Damn Vulnerable Web Application (DVWA): 1.0.7
  • Date release: 2 Oct 2011



Please remember that VulnHub is a free community resource so we are unable to check the machines that are provided to us. Before you download, please read our FAQs sections dealing with the dangers of running unknown VMs and our suggestions for "protecting yourself and your network. If you understand the risks, please download!


DVWA-1.0.7.iso

(Size: 480 MB)


Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is damn vulnerable.

Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and aid teachers/students to teach/learn web application security in a class room environment.

Source: http://www.dvwa.co.uk/





  • Filename: DVWA-1.0.7.iso
  • File size: 480 MB
  • MD5: 9484D8E2154D4E01FBD742CD7C10AFFD
  • SHA1: E190DE8F6BC61D6596F21A8A6A9DA9E19DA3C0BF


  • Format: Disk Image (.ISO)
  • Operating System: Linux


  • DHCP service: Enabled
  • IP address: Automatically assign




  • Remote Vulnerability
  • Web Application