Vulnerable Web Apps

Hello! My name is Manuel Santander. I teach at local Universities courses about web application security. I prefer to teach my students in a practical way, where they are able to interact with specific cases, learn the vulnerabilities and perform asessments.  There were not that many alternatives for VMWare appliances that covers what I wanted to teach, so I decided to mount my own appliance. It is a VMWare Ubuntu 14.04 server appliance, which includes the following applications:

To login into the virtual machine: use the following information:
The authentication information for the mysql database is:

The VMWare appliance can be downloaded from This virtual machine should not be ever placed in production environments as it contains lots of vulnerable web applications. The license for this project is GNU and so it comes with absolutely NO WARRANTY and no support.