OWASP Broken Web Applications Project Reviews

I can't extract the downloaded file, it tells me that file corrupted that happened with all the used extractors (rar, .7z, zip, ...) is it really corrupted or there is something needs to be done ??

This is great for testing skills, only thing I would add (so far) would be to add a generic page portal page for the 'Bricks' login pages after the SQL injection exploiting, to show a portal page, and the system you just accessed instead of just "logon success" banner. Otherwise it's great. I will be telling my fellow IT security classmates about this virtual machine

Thanks for Owaspbwa, it's good!