OWASP SamuraiWTF
SamuraiWTF is OWASP's open-source training environment for web application penetration testing. It ships as a ready-to-run desktop, pre-loaded with attack tools, vulnerable target applications, and Katana-managed configuration. This is designed so instructors and self-learners can run realistic, hands-on AppSec labs without building an environment from scratch.
The scripts and resources belonging to this project itself are licensed under the Lesser GNU Public License version 3 (LGPL3). All software loaded into the VM, including the tools, targets, utilities, and operating system itself retain their original license agreements.
Contributors are very welcome and the contribution process is standard:
fork this project
make your contribution
submit a pull request
Substantial or Regular contributors may also be brought in as full team members. This includes those who have made substantial contributions to previous versions of SamuraiWTF with the assumption they will continue to do so.
Project Resources
Project Information
Production Project
Classification
Code
Language
Shell
License
GNU Lesser General Public License v3.0
Contributors
21
GitHub Stars
571
Downloads
48
Corporate Supporters
OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.
Quick Links
Legal & Governance
SlackOWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.
© 2026, OWASP Foundation Inc. All rights reserved.