OWASP Damn Vulnerable Web Sockets

OWASP Damn Vulnerable Web Sockets - An OWASP incubator project

About OWASP Damn Vulnerable Web Sockets

Description

Damn Vulnerable Web Sockets (DVWS) is a deliberately vulnerable and insecure web application which works on web sockets for client-server communication. It is built on PHP with Ratchet and utilizes MySQL as backend database. DVWS has a number of functionalities which you commonly see in every other web application, they have been implemented in web sockets which is different from a typical web application communication. It allows users to test their web sockets testing skills, tools and scripts for web socket vulnerabilities. Web socket testing can be performed using popular tools such as OWASP ZAP and Burp Suite. The following vulnerabilities can be found: It requires the following to work properly: Note: Ratchet and ReactPHP-MySQL are packaged inside DVWS. Separate installation is not required.

• Damn Vulnerable Web Sockets (DVWS)

Licensing

This program is free software: you can redistribute it and/or modify it under the terms of the MIT License.

• MIT License

Project Resources

Project Leaders

Abhineet Jayaraj

Project Leader

Project Information

Incubator Project

Classification

Other

Language

PHP

License

MIT License

Contributors

GitHub Stars

363

Downloads

Corporate Supporters

Become a Corporate Supporter Meet our Corporate Supporters Supporter Job Postings

OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.

OWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.