Vulnerable Web apps

### Node

* [Damn Vulnerable Web Service](https://github.com/snoopysecurity/dvws-node)

* [Damn Vulnerable NodeJS Application](https://github.com/appsecco/dvna)

* [Damn Vulnerable Serverless Application](https://github.com/OWASP/DVSA)

* [OWASP: Juice Shop](https://github.com/bkimminich/juice-shop)

* [Damn Vulnerable Node Application](https://github.com/isp1r0/DVNA)

* [Intentionally Vulnerable node.js application](https://github.com/nVisium/node.nV)

* [Vulnode](https://github.com/dpnishant/vulnode)

* [OWASP: NodeGoat](https://github.com/OWASP/NodeGoat)

* [Vulnerable-node](https://github.com/cr0hn/vulnerable-node)

* [Xtreme Vulnerable Web Application (XVWA)](https://github.com/s4n7h0/xvwa)

### PHP

* [OWASP: Broken Web Applications(BWA)](https://github.com/chuckfw/owaspbwa/)

* [Damn Vulnerable Web Application (DVWA)](https://github.com/ethicalhack3r/DVWA)

* [Damn Vulnerable Web Services(DVWS)](https://github.com/snoopysecurity/dvws)

* [OWASP Hackademic Challenges](https://github.com/Hackademic/hackademic)

* [OWASP: Insecure Web App Project](https://sourceforge.net/projects/insecurewebapp/files/)

* [OWASP: WebGoat](https://github.com/OWASP/OWASPWebGoatPHP)

* [Bwapp](https://sourceforge.net/projects/bwapp/files/bWAPP/)

* [Beebox](https://sourceforge.net/projects/bwapp/files/bee-box/)

* [XVWA - Badly coded web application](https://github.com/s4n7h0/xvwa)

* [Drunk Admin Web Hacking Challenge](http://bechtsoudis.com/archive/2012/04/02/drunk-admin-web-hacking-challenge/index.html)

* [Peruggia](https://sourceforge.net/projects/peruggia/files/)

* [Mutillidae](http://www.irongeek.com/i.php?page=mutillidae/mutillidae-deliberately-vulnerable-php-owasp-top-10)

* [Btslab](https://github.com/CSPF-Founder/btslab/)

* [OWASP: Bricks](http://sechow.com/bricks/index.html)

* [The ButterFly Security Project](http://sourceforge.net/projects/thebutterflytmp/files/)

* [WackoPicko](https://github.com/adamdoupe/WackoPicko)

* [Vicnum](https://sourceforge.net/projects/vicnum/files/)

* [GameOver](https://sourceforge.net/projects/null-gameover/)

* [LAMPSecurity Training](https://sourceforge.net/projects/lampsecurity/)

* [Metasploitable](https://download.vulnhub.com/metasploitable/Metasploitable.zip)

* [Metasploitable 2](https://sourceforge.net/projects/metasploitable/files/)

* [Metasploitable 3](https://github.com/rapid7/metasploitable3)

* [Hackazon](https://github.com/rapid7/hackazon)

* [Twiterlike](https://github.com/sakti/twitterlike)

* [UltimateLAMP](https://download.vulnhub.com/ultimatelamp/UltimateLAMP-0.2.zip)

## Sql

* [SQLI-labs](https://github.com/Audi-1/sqli-labs)

* [Testenv](https://github.com/sqlmapproject/testenv)

### Python

* [Google Gruyere](http://google-gruyere.appspot.com)

### Java

* [Owasp: WebGoat](https://github.com/WebGoat/WebGoat)

* [Puzzlemall](https://code.google.com/p/puzzlemall/)

* [Hacme Books](http://www.mcafee.com/us/downloads/free-tools/hacmebooks.aspx)

* [Bodgeit](https://github.com/psiinon/bodgeit)

* [OWASP: Web Goat](https://github.com/WebGoat/WebGoat)