cyber-security-resources/vulnerable_servers/README.md

# Vulnerable Apps, Servers, and Websites

The following is a collection of vulnerable servers (VMs) or websites that you can use to practice your skills (sorted alphabetically).

- bWAPP : <https://sourceforge.net/projects/bwapp/files/bWAPP>
- Damn Vulnerable ARM Router (DVAR): <http://blog.exploitlab.net/2018/01/dvar-damn-vulnerable-arm-router.html>
- Damn Vulnerable iOS Application (DVIA): <http://damnvulnerableiosapp.com>
- Damn Vulnerable Linux (DVL): <https://osdn.net/projects/sfnet_virtualhacking/downloads/os/dvl/DVL_1.5_Infectious_Disease.iso>
- Damn Vulnerable Web App (DVWA): <https://github.com/ethicalhack3r/DVWA>
- DOMXSS: <http://www.domxss.com/domxss/>
- Game of Hacks: <http://www.gameofhacks.com>
- Gruyere: <https://google-gruyere.appspot.com>
- Hack This Site: <https://www.hackthissite.org>
- Hack This: <https://www.hackthis.co.uk>
- Hackazon : <https://github.com/rapid7/hackazon>
- HellBound Hackers: <https://www.hellboundhackers.org>
- Metasploitable2 : <https://community.rapid7.com/docs/DOC-1875>
- Metasploitable3 : <https://blog.rapid7.com/2016/11/15/test-your-might-with-the-shiny-new-metasploitable3/>
- Over The Wire Wargames: <http://overthewire.org/wargames>
- OWASP  Juice Shop : https://www.owasp.org/index.php/OWASP_Juice_Shop_Project
- OWASP Mutillidae II: <https://sourceforge.net/projects/mutillidae>
- Peruggia: <https://sourceforge.net/projects/peruggia>
- RootMe: <https://www.root-me.org>
- Samurai Web Testing Framework: <http://www.samurai-wtf.org/>
- Try2Hack: <http://www.try2hack.nl>
- Vicnum: <http://vicnum.ciphertechs.com>
- VulnHub:https://www.vulnhub.com
- Web Security Dojo: <https://www.mavensecurity.com/resources/web-security-dojo>
- **WebSploit** (maintained by Omar Santos): https://websploit.h4cker.org
- WebGoat: <https://github.com/WebGoat/WebGoat>
vulnerable apps 2017-08-20 21:27:05 -04:00			`# Vulnerable Apps, Servers, and Websites`
adding docker references Adding information about Docker for students to learn how to deploy vulnerable applications in Docker and understand the fundamentals of Linux containers. 2018-05-19 15:16:58 -04:00
Adding vulnerable applications Adding OWASP Juice Shop and sorting all apps alphabetically. 2018-07-27 19:50:52 -04:00			`The following is a collection of vulnerable servers (VMs) or websites that you can use to practice your skills (sorted alphabetically).`
adding docker references Adding information about Docker for students to learn how to deploy vulnerable applications in Docker and understand the fundamentals of Linux containers. 2018-05-19 15:16:58 -04:00
adding information about DOMXSS 2018-06-02 19:57:06 -04:00			`- bWAPP : <https://sourceforge.net/projects/bwapp/files/bWAPP>`
Adding vulnerable applications Adding OWASP Juice Shop and sorting all apps alphabetically. 2018-07-27 19:50:52 -04:00			`- Damn Vulnerable ARM Router (DVAR): <http://blog.exploitlab.net/2018/01/dvar-damn-vulnerable-arm-router.html>`
adding information about DOMXSS 2018-06-02 19:57:06 -04:00			`- Damn Vulnerable iOS Application (DVIA): <http://damnvulnerableiosapp.com>`
			`- Damn Vulnerable Linux (DVL): <https://osdn.net/projects/sfnet_virtualhacking/downloads/os/dvl/DVL_1.5_Infectious_Disease.iso>`
Adding vulnerable applications Adding OWASP Juice Shop and sorting all apps alphabetically. 2018-07-27 19:50:52 -04:00			`- Damn Vulnerable Web App (DVWA): <https://github.com/ethicalhack3r/DVWA>`
adding information about DOMXSS 2018-06-02 19:57:06 -04:00			`- DOMXSS: <http://www.domxss.com/domxss/>`
			`- Game of Hacks: <http://www.gameofhacks.com>`
			`- Gruyere: <https://google-gruyere.appspot.com>`
			`- Hack This Site: <https://www.hackthissite.org>`
Adding vulnerable applications Adding OWASP Juice Shop and sorting all apps alphabetically. 2018-07-27 19:50:52 -04:00			`- Hack This: <https://www.hackthis.co.uk>`
			`- Hackazon : <https://github.com/rapid7/hackazon>`
adding information about DOMXSS 2018-06-02 19:57:06 -04:00			`- HellBound Hackers: <https://www.hellboundhackers.org>`
Adding vulnerable applications Adding OWASP Juice Shop and sorting all apps alphabetically. 2018-07-27 19:50:52 -04:00			`- Metasploitable2 : <https://community.rapid7.com/docs/DOC-1875>`
			`- Metasploitable3 : <https://blog.rapid7.com/2016/11/15/test-your-might-with-the-shiny-new-metasploitable3/>`
adding information about DOMXSS 2018-06-02 19:57:06 -04:00			`- Over The Wire Wargames: <http://overthewire.org/wargames>`
Adding vulnerable applications Adding OWASP Juice Shop and sorting all apps alphabetically. 2018-07-27 19:50:52 -04:00			`- OWASP Juice Shop : https://www.owasp.org/index.php/OWASP_Juice_Shop_Project`
			`- OWASP Mutillidae II: <https://sourceforge.net/projects/mutillidae>`
adding information about DOMXSS 2018-06-02 19:57:06 -04:00			`- Peruggia: <https://sourceforge.net/projects/peruggia>`
			`- RootMe: <https://www.root-me.org>`
			`- Samurai Web Testing Framework: <http://www.samurai-wtf.org/>`
			`- Try2Hack: <http://www.try2hack.nl>`
			`- Vicnum: <http://vicnum.ciphertechs.com>`
Adding websploit Adding WebSploit 2018-07-28 21:20:13 -04:00			`- VulnHub:https://www.vulnhub.com`
adding information about DOMXSS 2018-06-02 19:57:06 -04:00			`- Web Security Dojo: <https://www.mavensecurity.com/resources/web-security-dojo>`
Adding websploit Adding WebSploit 2018-07-28 21:20:13 -04:00			`- WebSploit (maintained by Omar Santos): https://websploit.h4cker.org`
Adding vulnerable applications Adding OWASP Juice Shop and sorting all apps alphabetically. 2018-07-27 19:50:52 -04:00			`- WebGoat: <https://github.com/WebGoat/WebGoat>`