All DAMN vulnerable resources
Web application
- Damn Vulnerable Web Application (DVWA)
- Buggy Web Application (bWAPP)
- JuiceShop
- Multilidae II
- Damn Vulnerable WordPress Site (DVWPS)
- Damn Small Vulnerable Web (DSVW)
- WebGoat
- WebGoat.NET
- Peruggia
- PuzzleMail
- Bricks
- Damn Vulnerable Web-Socket (DVWS)
- Damn Vulnerable Node.JS Application (DVNA)
- Damn Vulnerable Python Web App (DVPWA)
- Damn Vulnerable Rails App (DVRA)
- NodeGoat (WebGoat + NodeJS)
- RailsGoat (WebGoat + Ruby & Rails)
- OWASP - SecurityShepherd
Web Service/API
- Damn Vulnerable Web Service (DVWS)
- Tiredful API
- Python Vulnerable API
- Websheep
- Damn Vulnerable C# API (DVCsharp-API)
- GraphQL security 101
Mobile Application
Android
- Damn Insecure and Vulnerable App (DIVA)
- OWASP MSTG Hacking Playground
- Damn Vulnerable Android App (DVAA)
- Damn Vulnerable FirefoxOS Application (DVFA)
- ExploitMe Mobile Android Labs
- Hacme Bank Android
- InsecureBank
- NcN Wargame
- OWASP Goatdroid
IO
- Damn Vulnerable iOS App (DVIA)
- Damn VUlnerable iOS App + Swift (DVIA-v2)
- OWASP MSTG Hacking Playground
- ExploitMe Mobile iPhone Labs
- OWASP iGoat
Hybrid technology
Thick Client
OS and Hardware
- Damn Vulnerable Device Driver (DVDD)
- Damn Vulnerable IoT Device (DVID)
- Damn Vulnerable Router Firmware (DVRF)
- Damn Vulnerable Raspberry Pi (Sticky Fingers DV-PI)
Cyber Physical System
Cloud Infrastructure
- Damn Vulnerable Cloud Application (DVCA)
- CloudGoat
- Damn Vulnerable Function as a Service (DVFaaS)
- Damn Vulnerable Serverless Application (DVSA)
Cryptocurrency and Blockchain
- Damn Vulnerable Crypto Wallet (DVCW)
- Damn Vulnerable Wallet App (DVWA)
- Damn Vulnerable Blockchain App (DVBA)
- Damn Vulnerable DeFi New Added - 31 August 2021
Vulnerability as a Service
- Heartbleed - cve-2014-0160 docker
- SambaCry - cve-2017-7494 docker
- Shellshock - cve-2014-6271 docker
OWASP vulnerability Projects
IoT
credit :arrow_down:
https://twseptian.github.io/penetration%20testing/pentest/Vulnerable-Resource/#web-application