/Vulnerable-Machines-for-Pentesting-and-Hacking

This is a collection of vulnerable machines that can help you to learn hacking, pentesting and bug hunting. I know there are a lot of lists out there, but most of them are not updated regularly. So I decided to make on myself. Hope this will help you

Cool Vulnerable Machines for Exploiting

Learning hacking is fun when you get hands on experience. Just by reading books/article or watching videos will not help if you don't face the actual scenario. But in real life, it's illegal to run an attack on an unauthorized website or server as it can cause that organization problems and you can face the laws.


This is where these vulnerable machines comes to help. This machines are developed with intentional vulerabilities to teach you how they look like and how to exploit them. You can download the VM image or Docker image to test you knowledge. You won't face lawsuit, legal action or any other shits that might casue unnecessary problems.

A

Name Link Type Tech
Acunetix Acuart http://testphp.vulnweb.com/ site PHP Apache Mysql
Acunetix SecurityTweets http://testhtml5.vulnweb.com/ site Nginx JQuery CouchDB
Acunetix Acublog http://testaspnet.vulnweb.com/ site ASP.NET, Microsoft SQL

B

Name Link Type Tech
b-wapp https://www.vulnhub.com/entry/bwapp-bee-box-v16,53/ VM Ngnix Mysql PHP
Badstore https://www.vulnhub.com/entry/badstore-123,41/ VM MySQL, JS
Butterfly Project https://sourceforge.net/projects/thebutterflytmp/ VM MySQL, PHP, Linux

C

Name Link Type Tech
Crackmebank http://crackme.cenzic.com/ site CentOS, APache, PHP
Commix https://github.com/stasinopoulos/commix-testbed VM PHP
CloudGoat https://github.com/RhinoSecurityLabs/cloudgoat Docker AWS, Go, Python, JS

D

Name Link Type Tech
DVCA https://github.com/m6a-UdS/dvca VM AWS, Go, Python, JS
DVNA https://github.com/appsecco/dvna Docker Node Js, JS
DVWA https://github.com/digininja/DVWA VM & Docker PHP, JS, Python
DVWS-node https://github.com/snoopysecurity/dvws-node Docker node, mongoDB, JS, API, GraphQL