Locked bWAPP - an extremely buggy web application !

[sQuo]

This is the hidden content, please

• Sign In
• or
• Sign Up

 

bWAPP or a buggy web application is a free and open source web application build to allow security enthusiasts, students and developers to better secure web applications. It is for educational purposes only.

 

bWAPP contains a lot of vulnerabilities from the OWASP Top 10 project.

It includes:

*/ injection vulnerabilities like SQL, HTML, command and mail injections

*/ Cross-Site Scripting (XSS)

*/ Cross-Site Request Forgery (CSRF)

*/ malicious file uploads

*/ authentication, authorization and session management issues

*/ directory traversal

*/ information disclosures

*/ configuration issues

*/ much more...

 

bWAPP is a PHP application that uses a MySQL database. It can be hosted on Linux and Windows using Apache and MySQL. It can also be installed with WAMP or XAMPP.

 

This project is part of the ITSEC GAMES project. ITSEC GAMES are a fun approach to IT security education. IT security, ethical hacking, training and fun... all mixed together.

 

bWAPP - Bug fixes and new features

Current version: bWAPP v1.01 updated on 10/01/2013

 

Bug fixes:

 

PHP session errors

connection setting issues (setting 'localhost:3306' not valid)

time period for the 'security_level' cookie has changed to 1 year.

New features:

none

 

This is the hidden content, please

• Sign In
• or
• Sign Up

 

This is the hidden content, please

• Sign In
• or
• Sign Up

 

This is the hidden content, please

• Sign In
• or
• Sign Up

 

This is the hidden content, please

• Sign In
• or
• Sign Up

 

This is the hidden content, please

• Sign In
• or
• Sign Up

 

 

 

This is the hidden content, please

• Sign In
• or
• Sign Up

Download bWAPPv1.01l.zip (3.4 MB)