OWASP Vulnerable Web Applications Directory | OWASP Foundation
A comprehensive registry of known vulnerable web and mobile applications for legal security testing and training.