overview
The following is a collection of vulnerable servers (VMs) or websites that you can use to practice your skills (sorted alphabetically).
Learning Platforms and VMs
- bWAPP
- CloudGoat
- Damn Small Vulnerable Web
- Damn Vulnerable ARM Router (DVAR)
- Damn Vulnerable iOS Application (DVIA)
- Damn Vulnerable Web App (DVWA)
- Damn Vulnerable Web Services
- Damn Vulnerable WordPress
- DOMXSS
- Extreme Vulnerable Node Application(XVNA)
- Game of Hacks
- Gruyere
- Hack This Site
- Hack This
- Hack Yourself first
- Hackazon
- HellBound Hackers
- Kubernetes Goat
- Metasploitable2
- Metasploitable3
- Over The Wire Wargames
- OWASP Juice Shop
- OWASP Mutillidae II
- Peruggia
- PortSwigger Web Security Academy
- RootMe
- Samurai Web Testing Framework
- Server-Side Request Forgery (SSRF) vulnerable Lab
- Snyk exploit-workshop
- Try2Hack
- Vicnum
- Vulnerable Single Sign-On (SSO)
- Web Security Dojo
- WebGoat
- XXE Lab