HackaGenius(www.hackagenius.co.cc)

The DVWA is bundled with the following type of vulnerabilities-

1. SQL Injection
2. XSS (Cross Site Scripting)
3. LFI (Local File Inclusion)
4. RFI (Remote File Inclusion)
5. Command Execution
6. Upload Script
7. Login Brute Force

WARNING !!
(Shamelessly ripped off from official statement :P )
It should come as no shock..but this application is damn vulnerable! Do not upload it to your hosting provider’s public html folder or any working web server as it will be hacked. It’s recommend that you download and install XAMP onto a local machine inside your LAN which is used solely for testing.
You can download DVWA 1.0.4 here:

Download:DVWA 1.0.4