kOaDT/oss-oopssec-store

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.

XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.

WebGoat is a deliberately insecure application

A deliberately vulnerable banking application designed for practicing Security Testing of Web App, APIs, AI integrated App and secure code reviews. Features common vulnerabilities found in real-world applications, making it an ideal platform for security professionals, developers, and enthusiasts to learn pentesting and secure coding practices.

A Broken Application - Very Vulnerable!

Damn Vulnerable Web Application (DVWA)

intentionally vuln web Application Security in django

Web and mobile application security training platform