---
title: "Deploy DVWA (Damn Vulnerable Web App)"
description: "DVWA is an intentionally vulnerable web app to help understand attacks."
category: "Other"
url: https://railway.com/deploy/GFqNIL
---

# Deploy DVWA (Damn Vulnerable Web App)

DVWA is an intentionally vulnerable web app to help understand attacks.

**[Deploy DVWA (Damn Vulnerable Web App) on Railway](https://railway.com/template/GFqNIL)**

Machine-readable deploy manifest (JSON, validated by TemplateCI): https://railway.com/deploy/GFqNIL/manifest.json

- **Creator:** Cyber Info
- **Category:** Other
- **Total deploys:** 35

## Template content

### MySQL https://devicons.railway.app/i/mysql.svg

- **Image:** mysql:9
- **Start command:** `docker-entrypoint.sh mysqld --innodb-use-native-aio=0 --disable-log-bin --performance_schema=0`

### DVWA

- **Image:** ghcr.io/w33ts/dvwa:latest
- **Public domain:** Yes

## Documentation

### About
"Damn Vulnerable Web Application (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goal is to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and to aid both students & teachers to learn about web application security in a controlled class room environment.

The aim of DVWA is to practice some of the most common web vulnerabilities, with various levels of difficulty, with a simple straightforward interface. Please note, there are both documented and undocumented vulnerabilities with this software. This is intentional. You are encouraged to try and discover as many issues as possible."

### Note
I have forked the original repo and made some slight modifications to enable easy Railway deployment. If you have any issues with deployment, please create an issue on the w33ts/DVWA repo or ping w33t.io in the Railway Discord. I will keep it up to date as needed.

### Sources
Original Repo: https://github.com/digininja/DVWA

Modified Repo: https://github.com/w33ts/DVWA

## Similar templates

- [Rocky Linux](https://railway.com/deploy/rocky-linux) — Hosted Rocky Linux 9 workspace with SSH and persistent storage. 🚀
- [Foundry Virtual Tabletop](https://railway.com/deploy/X5tR6G) — A Self-Hosted & Modern Roleplaying Platform
- [Letta Code Remote](https://railway.com/deploy/letta-code-remote) — Run a Letta Code agent 24/7. No inbound ports, just deploy.

Open this page in a browser: https://railway.com/deploy/GFqNIL