Vulnerable REST API with OWASP top 10 vulnerabilities for security testing

Detectify Crowdsource Challenge

a Damn Vulnerable Serverless Application

Awesome Vulnerable Applications

Pre-Built Vulnerable Environments Based on Docker-Compose

A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.

A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Security vulnerabilities within your own API Security CTF.

Damn Vulnerable Web Services is a vulnerable application with a web service and an API that can be used to learn about webservices/API related vulnerabilities.

Vulnerable API for research and education

A vulnerable RESTful application written in Node and React based on OWASP API security top 10 2023 edition.

The OWASP Vulnerable Web Applications Directory Project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.