Security Practical Challenges - Preinstalled and Prepared

List of preinstalled and prepared [ready to use] ISO images or virtual machines (VMs) that contain one or multiple vulnerable web applications for penetration and security testing.


 

  1. BadStore (ISO): http://www.badstore.net (download - registration required)

  2. OWASP BWA - Broken Web Applications Project (VMware - list): https://www.owasp.org/index.php/OWASP_Broken_Web_Applications_Project (download)

  3. Drunk Admin Web Hacking Challenge (VMware): https://bechtsoudis.com/work-stuff/challenges/drunk-admin-web-hacking-challenge/ (download)

  4. Exploit.co.il Vuln Web App (VMware): http://exploit.co.il/projects/vuln-web-app/ (download)

  5. GameOver (VMware): http://sourceforge.net/projects/null-gameover/ (download)

  6. Hackxor (VMware): http://hackxor.sourceforge.net/cgi-bin/index.pl (download) (hints&tips)

  7. Hacme Bank Prebuilt VM (VMware): http://ninja-sec.com/index.php/hacme-bank-prebuilt-vmware-image-ninja-sec-com/ (download)

  8. Kioptrix4 (VMware & Hyper-V): http://www.kioptrix.com/blog/?p=604 (download)

  9. LAMPSecurity (VMware): http://sourceforge.net/projects/lampsecurity/ (download) (doc)

  10. Metasploitable (VMware): http://blog.metasploit.com/2010/05/introducing-metasploitable.html (download - torrent) (doc)

  11. Metasploitable 2 (VMware):  https://community.rapid7.com/docs/DOC-1875 (download)

  12. Moth (VMware): http://www.bonsai-sec.com/en/research/moth.php (download)

  13. PHDays I-Bank (VMware):  http://phdays.blogspot.com.es/2012/05/once-again-about-remote-banking.html (download)

  14. Samurai WTF (ISO - list): http://www.samurai-wtf.org (download)

  15. Sauron (Quemu) [Spanish]: http://sg6-labs.blogspot.com/2007/12/secgame-1-sauron.html (solutions)

  16. UltimateLAMP (VMware - list): http://ronaldbradford.com/blog/ultimatelamp-2006-05-19/ (download)

  17. Virtual Hacking Lab (ZIP): http://sourceforge.net/projects/virtualhacking/ (download)

  18. Web Security Dojo (VMware, VirtualBox - list): http://www.mavensecurity.com/web_security_dojo/ (download)



If you required any more information and help about any application please mail @ This email address is being protected from spambots. You need JavaScript enabled to view it.