- Home
- Security Operations
- Cyber Range Training
- Damn Small Vulnerable Web
Damn Small Vulnerable Web
A deliberately vulnerable web application written in under 100 lines of Python code for educational purposes and web security testing.

Damn Small Vulnerable Web
A deliberately vulnerable web application written in under 100 lines of Python code for educational purposes and web security testing.
Damn Small Vulnerable Web Description
Damn Small Vulnerable Web (DSVW) is a deliberately vulnerable web application designed for educational purposes and security testing. Written in under 100 lines of Python code, it provides a lightweight platform for learning about web application vulnerabilities and practicing security testing techniques. The application includes implementations of common web vulnerabilities such as XML External Entity (XXE) attacks, XPath injection, and other popular web application security flaws. It serves as a controlled environment where security professionals, students, and researchers can safely explore and understand various attack vectors without risking production systems. DSVW runs as a local HTTP server and can be accessed through a web browser for hands-on vulnerability testing and exploitation practice. The application requires Python 3.x and optionally python-lxml for certain vulnerability types like XML External Entity attacks. Its minimal codebase makes it easy to understand, modify, and deploy for training scenarios.
FEATURED
Password manager with end-to-end encryption and identity protection features
VPN service providing encrypted internet connections and privacy protection
Fractional CISO services for B2B companies to accelerate sales and compliance
Stay Updated with Mandos Brief
Get the latest cybersecurity updates in your inbox
TRENDING CATEGORIES
POPULAR
Security platform that provides protection, monitoring and governance for enterprise generative AI applications and LLMs against various threats including prompt injection and data poisoning.
A threat intelligence aggregation service that consolidates and summarizes security updates from multiple sources to provide comprehensive cybersecurity situational awareness.
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.