A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB. This list aims to help starters as well as pros to test out and enhance their penetration skills.
- BadStore
- BodgeIt Store
- Butterfly Security Project
- bWAPP
- bWAPP
- Commix
- CryptOMG
- Damn Vulnerable Node Application(DVNA)
- Damn Vulnerable Web App (DVWA)
- Damn Vulnerable Web Services (DVWS)
- Drunk Admin Web Hacking Challenge
- Exploit KB Vulnerable Web App
- Foundstone Hackme Bank
- Foundstone Hackme Books
- Foundstone Hackme Casino
- Foundstone Hackme Shipping
- Foundstone Hackme Travel
- GameOver
- hackxor
- Hackazon
- LAMPSecurity
- Moth
- NOWASP / Mutillidae 2
- OWASP BWA
- OWASP Hackademic
- OWASP SiteGenerator
- OWASP Bricks
- OWASP Security Shepherd
- PentesterLab
- PHDays iBank CTF
- SecuriBench
- SentinelTestbed
- SocketToMe
- sqli-labs
- MCIR (Magical Code Injection Rainbow)
- sqlilabs
- VulnApp
- PuzzleMall
- WackoPicko
- WAED
- WebGoat.NET
- WebSecurity Dojo
- XVWA
- Zap WAVE
- Acunetix acuforum
- Acunetix acublog
- Acunetix acuart
- Cenzic crackmebank
- HP freebank
- IBM altoromutual
- Mavituna testsparker
- Mavituna testsparker
- NTOSpider Test Site
- Embedded Security CTF
- EnigmaGroup
- Escape
- Google Gruyere
- Gh0st Lab
- Hack The Box
- Hack This Site
- HackThis
- HackQuest
- Hack.me
- Hacking-Lab
- Hacker Challenge
- Hacker Test
- hACME Game
- Halls Of Valhalla
- Hax.Tor
- Metasploit Unleashed
- OverTheWire
- PentestIT
- CSC Play on Demand
- pwn0
- RootContest
- Root Me
- Security Treasure Hunt
- Smash The Stack
- SQLZoo
- TheBlackSheep and Erik
- ThisIsLegal
- Try2Hack
- WabLab
- XSS: Can You XSS This?
- XSS Game
- XSS: ProgPHP
- binjitsu
- CTFd
- Mellivora
- Metasploitable2
- NightShade
- MCIR
- Docker
- Vagrant
- NETinVM
- SmartOS
- SmartDataCenter
- vSphere Hypervisor
- GNS3
- OCCP
- XAMPP
- Damn Vulnerable Android App (DVAA)
- Damn Vulnerable FirefoxOS Application (DVFA)
- Damn Vulnerable iOS App (DVIA)
- ExploitMe Mobile Android Labs
- ExploitMe Mobile iPhone Labs
- Hacme Bank Android
- InsecureBank
- NcN Wargame
- OWASP iGoat
- OWASP Goatdroid
Contributions are always welcome !
Add your name to the CONTRIBUTORS.md file
Add any new useful links to resources with respect to pentesting and vulnerable testintg environments
Make a pull request and wait for it to be merged!
Fork this repository (Click the Fork button in the top right of this page, click your Profile Image)
Clone your fork down to your local machine
git clone https://github.com/your-username/awesome-vulnerable.git
Create a branch
git checkout -b branch-name
Make your changes (choose from any task below)
Commit and push
git add . git commit -m 'Commit message' git push origin branch-name
Create a new pull request from your forked repository (Click the New Pull Request button located at the top of your repo)
Wait for your PR review and merge approval!
Star this repository if you had fun!
Thanks a bunch for your contributions !!! Start Hacking !!