Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL Security.

HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux

Working Python test and PoC for CVE-2018-11776, includes Docker lab

Create randomly insecure VMs

A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

Vulnerable server used for learning software exploitation

WebGoat is a deliberately insecure application

Herramienta en PowerShell ideal para desplegar tu propio entorno AD vulnerable de forma automatizada.

OWASP VulnerableApp Project: For Security Enthusiasts by Security Enthusiasts.

Web application with vulnerabilities found in real cases, both in pentests and in Bug Bounty programs.

AWSGoat : A Damn Vulnerable AWS Infrastructure

Lord Of Active Directory - automatic vulnerable active directory on AWS