This post contains some of the vulnerability apps means to improve your penetration testing skills and hacking skills

Timeline:

• Tuesday, 31 August 2021 - Add Damn Vulnerable DeFi

ContentsPermalink

• Web Application
• Mobile Applicaton
• Thick Client
• OS and Hardware
• Cyber Physical System
• Cloud Infrastructure
• Cryptocurrency and Blockchain
• Vulnerability as a Service
• OWASP vulnerability Projects
• Internet of Things

Web ApplicationPermalink

• Damn Vulnerable Web Application (DVWA)
• Buggy Web Application (bWAPP)
• JuiceShop
• Multilidae II
• Damn Vulnerable WordPress Site (DVWPS)
• Damn Small Vulnerable Web (DSVW)
• WebGoat
• WebGoat.NET
• Peruggia
• PuzzleMail
• Bricks
• Damn Vulnerable Web-Socket (DVWS)
• Damn Vulnerable Node.JS Application (DVNA)
• Damn Vulnerable Python Web App (DVPWA)
• Damn Vulnerable Rails App (DVRA)
• NodeGoat (WebGoat + NodeJS)
• RailsGoat (WebGoat + Ruby & Rails)
• OWASP - SecurityShepherd

Web Service/APIPermalink

• Damn Vulnerable Web Service (DVWS)
• Tiredful API
• Python Vulnerable API
• Websheep
• Damn Vulnerable C# API (DVCsharp-API)
• GraphQL security 101

Mobile ApplicationPermalink

AndroidPermalink

• Damn Insecure and Vulnerable App (DIVA)
• OWASP MSTG Hacking Playground
• Damn Vulnerable Android App (DVAA)
• Damn Vulnerable FirefoxOS Application (DVFA)
• ExploitMe Mobile Android Labs
• Hacme Bank Android
• InsecureBank
• NcN Wargame
• OWASP Goatdroid

IOSPermalink

• Damn Vulnerable iOS App (DVIA)
• Damn VUlnerable iOS App + Swift (DVIA-v2)
• OWASP MSTG Hacking Playground
• ExploitMe Mobile iPhone Labs
• OWASP iGoat

Hybrid technologyPermalink

• Damn Vulnerable Hybrid Mobile (DVHMA)
• VyAPI - cloud based app as a backend

Thick ClientPermalink

• Thick Client Application
• Java EE

OS and HardwarePermalink

• Damn Vulnerable Device Driver (DVDD)
• Damn Vulnerable IoT Device (DVID)
• Damn Vulnerable Router Firmware (DVRF)
• Damn Vulnerable Raspberry Pi (Sticky Fingers DV-PI)

Cyber Physical SystemPermalink

• Damn Vulnerable Chemical Process — Tenneese Eastman (DVCP-TE) — SCADA

Cloud InfrastructurePermalink

• Damn Vulnerable Cloud Application (DVCA)
• CloudGoat
• Damn Vulnerable Function as a Service (DVFaaS)
• Damn Vulnerable Serverless Application (DVSA)

Cryptocurrency and BlockchainPermalink

• Damn Vulnerable Crypto Wallet (DVCW)
• Damn Vulnerable Wallet App (DVWA)
• Damn Vulnerable Blockchain App (DVBA)
• Damn Vulnerable DeFi New Added - 31 August 2021

Vulnerability as a ServicePermalink

• Heartbleed - cve-2014-0160 docker
• SambaCry - cve-2017-7494 docker
• Shellshock - cve-2014-6271 docker

OWASP vulnerability ProjectsPermalink

• OWASP Vulnerable Web Applications Directory

IoTPermalink

• IoTGoat Project
• ByteSweep Project