Practice Lab Setup Guides

This section provides step-by-step guides for setting up some of the most popular practice labs.

Featured Labs

A modern and sophisticated insecure web application with all of the OWASP Top 10 vulnerabilities and more.

Damn Vulnerable Web Application (DVWA) is a PHP/MySQL web application that is damn vulnerable.

A deliberately insecure web application maintained by OWASP as a training ground for web application security.

A buggy web application that is designed to help security enthusiasts, developers, and students to discover and to prevent web vulnerabilities.

A free, open-source, deliberately vulnerable web application providing a target for web-security enthusiasts.

A collection of free, online labs from the creators of Burp Suite.

A collection of vulnerable virtual machines that you can use to practice your penetration testing skills.