All DAMN vulnerable resources

Web application

• Damn Vulnerable Web Application (DVWA)

• Buggy Web Application (bWAPP)

• JuiceShop

• Multilidae II

• Damn Vulnerable WordPress Site (DVWPS)

• Damn Small Vulnerable Web (DSVW)

• WebGoat

• WebGoat.NET

• Peruggia

• PuzzleMail

• Bricks

• Damn Vulnerable Web-Socket (DVWS)

• Damn Vulnerable Node.JS Application (DVNA)

• Damn Vulnerable Python Web App (DVPWA)

• Damn Vulnerable Rails App (DVRA)

• NodeGoat (WebGoat + NodeJS)

• RailsGoat (WebGoat + Ruby & Rails)

• OWASP - SecurityShepherd

Web Service/API

• Damn Vulnerable Web Service (DVWS)

• Tiredful API

• Python Vulnerable API

• Websheep

• Damn Vulnerable C# API (DVCsharp-API)

• GraphQL security 101

Mobile Application

Android

• Damn Insecure and Vulnerable App (DIVA)

• OWASP MSTG Hacking Playground

• Damn Vulnerable Android App (DVAA)

• Damn Vulnerable FirefoxOS Application (DVFA)

• ExploitMe Mobile Android Labs

• Hacme Bank Android

• InsecureBank

• NcN Wargame

• OWASP Goatdroid

IO

• Damn Vulnerable iOS App (DVIA)

• Damn VUlnerable iOS App + Swift (DVIA-v2)

• OWASP MSTG Hacking Playground

• ExploitMe Mobile iPhone Labs

• OWASP iGoat

Hybrid technology

• Damn Vulnerable Hybrid Mobile (DVHMA)

• VyAPI - cloud based app as a backend

Thick Client

• Thick Client Application

• Java EE

OS and Hardware

• Damn Vulnerable Device Driver (DVDD)

• Damn Vulnerable IoT Device (DVID)

• Damn Vulnerable Router Firmware (DVRF)

• Damn Vulnerable Raspberry Pi (Sticky Fingers DV-PI)

Cyber Physical System

• Damn Vulnerable Chemical Process — Tenneese Eastman (DVCP-TE) — SCADA

Cloud Infrastructure

• Damn Vulnerable Cloud Application (DVCA)

• CloudGoat

• Damn Vulnerable Function as a Service (DVFaaS)

• Damn Vulnerable Serverless Application (DVSA)

Cryptocurrency and Blockchain

• Damn Vulnerable Crypto Wallet (DVCW)

• Damn Vulnerable Wallet App (DVWA)

• Damn Vulnerable Blockchain App (DVBA)

• Damn Vulnerable DeFi New Added - 31 August 2021

Vulnerability as a Service

• Heartbleed - cve-2014-0160 docker

• SambaCry - cve-2017-7494 docker

• Shellshock - cve-2014-6271 docker

OWASP vulnerability Projects

• OWASP Vulnerable Web Applications Directory

IoT

• IoTGoat Project

• ByteSweep Project

credit ⬇️

https://twseptian.github.io/penetration%20testing/pentest/Vulnerable-Resource/#web-application