SeekSecurity

Damn Vulnerable Web App (DVWA) is a web application that is damn
vulnerable. Its main goals are to be light weight, easy to use and
full of vulnerabilities to exploit. It has been developed for the use of information security professionals and students to test out their skillz and/or toolz in a legal environment.