SkillAgentSearch skills...

CVWA

Conviso Vulnerable Web Application is the OSS project from the Conviso Application Security for the community. The project represents a vulnerable web application to practice security testing and improve your learning in AppSec..

Install / Use

/learn @convisolabs/CVWA
About this skill

Quality Score

0/100

Supported Platforms

Universal

README

<p align="center"> <img src="https://user-images.githubusercontent.com/66391286/184713609-b0a73026-c6c0-403f-8085-bb37521f1ba4.png" width="500"> <p align="center">Conviso Vulnerable Web Application</p> <p align="center"> <a href="https://github.com/convisolabs/CVWA/master/LICENSE.md"> <img src="https://img.shields.io/badge/license-MIT-blue.svg"> </a> <a href="https://github.com/convisolabs/CVWA/releases"> <img src="https://img.shields.io/badge/version-0.0.1-blue.svg"> </a> </p> </p>

Description

This application was purposely coded insecurely, having a large number of vulnerabilities and bad practices. The idea is to simulate an initial blog structure, made by a novice programmer who made serious mistakes, leaving it vulnerable to numerous attacks.

We use this application for educational purposes only, making demonstrations on how to manually and automatically detect these vulnerabilities and also how to fix them.


How to deploy on local machines

$ git clone https://github.com/convisolabs/CVWA
$ cd CVWA
$ docker build -t cvwa .
$ docker container run -ti -p 8080:80 cvwa

Contribution


License

Related Skills

View on GitHub
GitHub Stars63
CategoryDevelopment
Updated2mo ago
Forks36

Languages

HTML

Security Score

100/100

Audited on Jan 9, 2026

No findings