Home

Awesome

Awesome Vulnerable Web Applications

NameURLTechnologyCreds (role:user:password)
Acunetix Acuforumhttp://testasp.vulnweb.com/IIS, ASP, Microsoft SQL Serverunknown
Acunetix Acubloghttp://testaspnet.vulnweb.com/IIS, ASP.NET, Microsoft SQL Serverunknown
Acunetix SecurityTweetshttp://testhtml5.vulnweb.com/nginx, Python, Flask, CouchDBadmin:admin:1234
Acunetix Acuarthttp://testphp.vulnweb.com/Apache, PHP, MySQLunknown
Broken Crystalshttps://brokencrystals.com/Node.jsadmin:admin
bWAPPhttp://bwapp.ywnxs.com/Ubuntu, Nginx, PHPuser: bee:bug
Cenzic crackmebankhttp://crackme.cenzic.com/CentOS, Apache, PHPunknown
Firing Rangehttps://public-firing-range.appspot.com/Google App Engineunknown
PortSwigger Gin & Juice Shophttps://ginandjuice.shop/AWSunknown
Google Gruyerehttp://google-gruyere.appspot.com/startPython, Google App Engineunknown
HackYourselfFirsthttp://hack-yourself-first.com/IIS, ASP.NETunknown
HP freebankhttp://zero.webappsecurity.com/Apache Tomcatunknown
IBM Altoro Mutualhttp://demo.testfire.net/IIS, ASP.NETuser:jsmith:Demo1234
IBM AltoroJ Mutualhttp://www.altoromutual.com:8080/Tomcat, Java 3.1user:jsmith:Demo1234
IBM Hard Altoro Mutualhttp://hard.altoromutual.com/Tomcat, Java 3.1, MegaScriptuser:jsmith:Demo1234
OWASP Juice Shophttps://juice-shop.herokuapp.com/Node.jsunknown
OWASP NodeGoathttp://nodegoat.herokuapp.com/Node.jsunknown
Rapid7 Hackazonhttp://hackazon.webscantest.com/Apache, PHP, Ajax, JSONm XML, Gwt, AMFadmin:admin:123456
Rapid7 WebScanTesthttp://webscantest.com/Apache, PHPuser:testuser:testpass
Testsparker ASP.NEThttp://aspnet.testsparker.com/Windows, IIS, ASP.NET, Microsoft SQL Serverunknown:alan@turing.com:theturingtest
Testsparker PHPhttp://php.testsparker.com/Windows, Apache, PHP, MySQLunknown:admin:admin123456
Testsparker SPA (Angular)http://angular.testsparker.com/Ubuntu, Apache, PHP, Angular 5, MySQLunknown
XSS Testhttps://brutelogic.com.br/knoxss.htmlunknown
Pentest-Groundhttps://pentest-ground.comApache, Nginx, Redisunknown