These are deliberately vulnerable web applications used for educational and testing purposes.
Testfire.netarrow-up-right - Vulnerable Banking Application
OWASP Juice Shoparrow-up-right - Vulnerable Shopping Application
Google Gruyerearrow-up-right - Google Developed app with various by-design vulnerabilities
bWAPParrow-up-right - Open-source vulnerable web app with web vulnerabilities for practice.
Last updated 6 months ago