2017-08-21 01:27:05 +00:00
|
|
|
# Vulnerable Apps, Servers, and Websites
|
2018-05-19 19:16:58 +00:00
|
|
|
|
2018-07-27 23:50:52 +00:00
|
|
|
The following is a collection of vulnerable servers (VMs) or websites that you can use to practice your skills (sorted alphabetically).
|
2018-05-19 19:16:58 +00:00
|
|
|
|
2018-06-02 23:57:06 +00:00
|
|
|
- bWAPP : <https://sourceforge.net/projects/bwapp/files/bWAPP>
|
2018-07-27 23:50:52 +00:00
|
|
|
- Damn Vulnerable ARM Router (DVAR): <http://blog.exploitlab.net/2018/01/dvar-damn-vulnerable-arm-router.html>
|
2018-06-02 23:57:06 +00:00
|
|
|
- Damn Vulnerable iOS Application (DVIA): <http://damnvulnerableiosapp.com>
|
|
|
|
|
- Damn Vulnerable Linux (DVL): <https://osdn.net/projects/sfnet_virtualhacking/downloads/os/dvl/DVL_1.5_Infectious_Disease.iso>
|
2018-07-27 23:50:52 +00:00
|
|
|
- Damn Vulnerable Web App (DVWA): <https://github.com/ethicalhack3r/DVWA>
|
2018-06-02 23:57:06 +00:00
|
|
|
- DOMXSS: <http://www.domxss.com/domxss/>
|
|
|
|
|
- Game of Hacks: <http://www.gameofhacks.com>
|
|
|
|
|
- Gruyere: <https://google-gruyere.appspot.com>
|
|
|
|
|
- Hack This Site: <https://www.hackthissite.org>
|
2018-07-27 23:50:52 +00:00
|
|
|
- Hack This: <https://www.hackthis.co.uk>
|
|
|
|
|
- Hackazon : <https://github.com/rapid7/hackazon>
|
2018-06-02 23:57:06 +00:00
|
|
|
- HellBound Hackers: <https://www.hellboundhackers.org>
|
2018-07-27 23:50:52 +00:00
|
|
|
- Metasploitable2 : <https://community.rapid7.com/docs/DOC-1875>
|
|
|
|
|
- Metasploitable3 : <https://blog.rapid7.com/2016/11/15/test-your-might-with-the-shiny-new-metasploitable3/>
|
2018-06-02 23:57:06 +00:00
|
|
|
- Over The Wire Wargames: <http://overthewire.org/wargames>
|
2018-07-27 23:50:52 +00:00
|
|
|
- OWASP Juice Shop : https://www.owasp.org/index.php/OWASP_Juice_Shop_Project
|
|
|
|
|
- OWASP Mutillidae II: <https://sourceforge.net/projects/mutillidae>
|
2018-06-02 23:57:06 +00:00
|
|
|
- Peruggia: <https://sourceforge.net/projects/peruggia>
|
|
|
|
|
- RootMe: <https://www.root-me.org>
|
|
|
|
|
- Samurai Web Testing Framework: <http://www.samurai-wtf.org/>
|
|
|
|
|
- Try2Hack: <http://www.try2hack.nl>
|
|
|
|
|
- Vicnum: <http://vicnum.ciphertechs.com>
|
2018-07-29 01:20:13 +00:00
|
|
|
- VulnHub:https://www.vulnhub.com
|
2018-06-02 23:57:06 +00:00
|
|
|
- Web Security Dojo: <https://www.mavensecurity.com/resources/web-security-dojo>
|
2018-07-29 01:20:13 +00:00
|
|
|
- **WebSploit** (maintained by Omar Santos): https://websploit.h4cker.org
|
2018-07-27 23:50:52 +00:00
|
|
|
- WebGoat: <https://github.com/WebGoat/WebGoat>
|
