robohobo1

Marathon (Vulnerable Java Web Application)

XVWA (Xtremely Vulnerable Web Application)

Webgoat (Vulnerable Web Application)

WAVSEP (Web Application Vulnerability Scanner Evaluation Project)

WackoPicko (Vulnerable Web Application)

VulnWebApp (Non-Descript Vulnerable Web Application)

VulnBank (Modern Vulnerable Web Application)

Tiredful API (Intentionally Broken REST API Web Application)

TicketMagpie (Modern Vulnerable Web Application)

Puzzlemall (Google's Session Puzzle Testing Web Application)

Pixi (Vulnerable Node Web Application)

Mutillidae (Vulnerable Web Application)

JuiceShop (Vulnerable JavaScript Web Application)

HacmeCasino (Vulnerable Ruby-On-Rails Web Application)

Hackazon (Advanced Vulnerable Web Application)

Gruyere (Google's Vulnerable and Cheesy Web Application)

EasyBuggy (Easily Exploitable and Buggy Web Application)

DVWS (Damn Vulnerable Web Sockets)

DSVW (Damn Small Vulnerable Web Application)

DVWA (Damn Vulnerable Web Application)

BWAPP (Buggy Web Application

BadStore (Vulnerable TomCat Web Application)

BodgeIT (Vulnerable TomCat Web Application)

AltoroJ (Vulnerable J2EE Web Application)

VAPI (Vulnerable Adversely Programmed Interface)

DIWA (Deliberately Insecure Web Application)