mirror of
https://github.com/The-Art-of-Hacking/h4cker.git
synced 2025-02-23 00:29:57 -05:00
Vulnerable Apps, Servers, and Websites
The following is a collection of vulnerable servers (VMs) or websites that you can use to practice your skills (sorted alphabetically).
- bWAPP
- CloudGoat
- Damn Small Vulnerable Web
- Damn Vulnerable ARM Router (DVAR)
- Damn Vulnerable iOS Application (DVIA)
- Damn Vulnerable Web App (DVWA)
- Damn Vulnerable Web Services
- Damn Vulnerable WordPress
- DOMXSS
- Extreme Vulnerable Node Application(XVNA)
- Game of Hacks
- Gruyere
- Hack This Site
- Hack This
- [Hack Yourself first <https://hack-yourself-first.com/)
- Hackazon
- HellBound Hackers
- Kubernetes Goat
- Metasploitable2
- Metasploitable3
- Over The Wire Wargames
- [OWASP Juice Shop ] https://www.owasp.org/index.php/OWASP_Juice_Shop_Project
- OWASP Mutillidae II
- Peruggia
- PortSwigger Web Security Academy
- RootMe
- Samurai Web Testing Framework
- Server-Side Request Forgery (SSRF) vulnerable Lab
- Snyk exploit-workshop
- Try2Hack
- Vicnum
- Vulnerable Single Sign-On (SSO)
- Web Security Dojo
- WebGoat
- XXE Lab
WebSploit Labs
- WebSploit Labs (created and maintained by Omar Ωr Santos)
- Mayhem - vulnerable container part of WebSploit
- RTOV-Hackme - vulnerable container part of WebSploit
- RTV-Safemode - vulnerable container created by Omar Ωr for DEF CON Safemode