Vicnum: 1.3


  • Name: Vicnum: 1.3
  • Date release: 18 Oct 2009



VMvicnum13.zip

(Size: 303 MB)


A flexible web app showing vulnerabilities such as cross site scripting, sql injections, and session management issues. Helpful to IT auditors honing web security skills and setting up 'capture the flag'.

Source: https://owasp.org/index.php/Category:OWASP_Vicnum_Project


**Note: 'Bad virtual machine file'. You'll need to create a new virtual machine & attach the existing hard drive**


  • Filename: VMvicnum13.zip
  • File size: 303 MB
  • MD5: DB4E6598ECC978BCF5DE0DE48A1B1FA0
  • SHA1: 0C03C9BCEEA57D86205881DC30781380485E9F19


  • Format: Virtual Machine (VMware)
  • Operating System: Linux


  • DHCP service: Enabled
  • IP address: Automatically assign


  • *Broken*
  • Remote Vulnerability
  • Web Application


  • Cross-Site Scripting
  • SQL Injection