Go to DVWA security option. From here we can’t change the security level. Security level now is set to impossible and that is mean we can’t hack it to make this web application hackable. Change the security level too low. By setting the security level too low, we make this work application completely vulnerable, so we can test different vulnerabilities.