https://github.com/stamparm/DSVW

Damn Small Vulnerable Web
https://github.com/stamparm/DSVW

Last synced: 20 days ago
JSON representation

Damn Small Vulnerable Web

• Host: GitHub
• URL: https://github.com/stamparm/DSVW
• Owner: stamparm
• License: unlicense
• Created: 2015-11-20T16:15:01.000Z (over 9 years ago)
• Default Branch: master
• Last Pushed: 2024-06-14T15:42:29.000Z (10 months ago)
• Last Synced: 2025-03-25T14:07:56.395Z (21 days ago)
• Language: Python
• Homepage:
• Size: 46.9 KB
• Stars: 804
• Watchers: 29
• Forks: 329
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-vulnerable-apps - DSVW - Damn Small Vulnerable Web (OWASP Top 10)
• awesome-python-security - DSVW - Damn Small Vulnerable Web (DSVW) is a deliberately vulnerable web application written in under 100 lines of code, created for educational purposes. (Hacking Playground)
• awesome-cyber-skills - Damn Small Vulnerable Web
• awesome-termux-hacking - DSVW - Damn Small Vulnerable Web.[](https://github.com/stamparm/DSVW/stargazers/) (Uncategorized / Uncategorized)

README

        
![Sign](https://i.imgur.com/bovh598.png)

Damn Small Vulnerable Web [![Python 3.x](https://img.shields.io/badge/python-3.x-yellow.svg)](https://www.python.org/) [![License](https://img.shields.io/badge/license-Unlicense-red.svg)](https://github.com/stamparm/DSVW/blob/master/LICENSE)

=========

**Damn Small Vulnerable Web** (DSVW) is a deliberately vulnerable web application written in under 100 lines of code, created for educational purposes. It supports majority of (most popular) web application vulnerabilities together with appropriate attacks.

![XSS](http://i.imgur.com/BoSOgJs.png)

Quick start

----

Run the following command:

```

$ python3 dsvw.py 

Damn Small Vulnerable Web (DSVW) < 100 LoC (Lines of Code) #v0.2a

 by: Miroslav Stampar (@stamparm)

[i] running HTTP server at 'http://127.0.0.1:65412'...

```

and navigate your browser to http://127.0.0.1:65412/:

![DSVW](http://i.imgur.com/9nG4mwu.png)

Requirements

----

Python (**3.x**) is required for running this program. Items *XML External Entity (local)*, *XML External Entity (remote)* and *Blind XPath Injection (boolean)* require installation of `python-lxml` (e.g. `apt-get install python-lxml`). Otherwise, those will be disabled.

To install lxml via pip, run the following command:

```

pip install -r requirements.txt

```