http://code.google.com/p/owaspbwa/
http://hackademic1.teilar.gr/
https://www.owasp.org/index.php/Owasp_SiteGenerator
http://sourceforge.net/projects/owaspbricks/
https://www.owasp.org/index.php/OWASP_Security_Shepherd
http://www.dvwa.co.uk/
http://dvws.professionallyevil.com/
https://github.com/jerryhoff/WebGoat.NET/
https://pentesterlab.com/
http://thebutterflytmp.sourceforge.net/
http://www.mcafee.com/us/downloads/free-tools/hacme-bank.aspx
http://www.mcafee.com/us/downloads/free-tools/hacmebooks.aspx
http://www.mcafee.com/us/downloads/free-tools/hacme-casino.aspx
http://www.mcafee.com/us/downloads/free-tools/hacmeshipping.aspx
http://www.mcafee.com/us/downloads/free-tools/hacmetravel.aspx
http://sourceforge.net/projects/lampsecurity/
http://www.bonsai-sec.com/en/research/moth.php
https://github.com/adamdoupe/WackoPicko
http://www.badstore.net/
http://www.mavensecurity.com/web_security_dojo/
http://code.google.com/p/bodgeit/
http://hackxor.sourceforge.net/cgi-bin/index.pl
http://suif.stanford.edu/~livshits/securibench/
https://github.com/SpiderLabs/SQLol
https://github.com/SpiderLabs/CryptOMG
https://github.com/SpiderLabs/XMLmao
http://exploit.co.il/projects/vuln-web-app/
http://blog.phdays.com/2012/05/once-again-about-remote-banking.html
http://sourceforge.net/projects/null-gameover/
http://code.google.com/p/zaproxy/downloads/detail?name=zap-wave-0.1.zip
http://code.google.com/p/puzzlemall/
http://www.nth-dimension.org.uk/blog.php?id=88
https://github.com/Audi-1/sqli-labs
https://bechtsoudis.com/work-stuff/challenges/drunk-admin-web-hacking-challenge/
http://www.mmeit.be/bwapp/ 
Http://sourceforge.net/projects/bwapp/files/bee-box/
http://sourceforge.net/projects/mutillidae/
http://digi.ninja/projects/sockettome.php


http://sourceforge.net/projects/virtualhacking/files/os/dvl/
http://sourceforge.net/projects/virtualhacking/files/os/metasploitable/
http://sourceforge.net/projects/lampsecurity/
http://www.amanhardikar.com/mindmaps/practice-links.html
http://hackingdojo.com/downloads/iso/De-ICE_S1.100.iso
http://hackingdojo.com/downloads/iso/De-ICE_S1.110.iso
http://hackingdojo.com/downloads/iso/De-ICE_S1.120.iso
http://hackingdojo.com/downloads/iso/De-ICE_S2.100.iso
http://hackingdojo.com/downloads/iso/De-ICE_S1.123.iso
http://www.pwnos.com/
http://sourceforge.net/projects/holynix/files/
http://www.kioptrix.com/blog/
http://exploit-exercises.com/download
http://pentestlab.org/lab-in-a-box/
http://www.rebootuser.com/?page_id=1041
http://neutronstar.org/goatselinux.html
http://www.scriptjunkie.us/2012/04/the-hacker-games/
http://21ltr.com/scenes/
http://sg6-labs.blogspot.co.uk/2007/12/secgame-1-sauron.html
https://www.pentesterlab.com/exercises
http://www.thegreycorner.com/2010/12/introducing-vulnserver.html
http://www.turnkeylinux.org/
https://bitnami.com/stacks
http://elasticserver.com
http://www.centos.org/



http://testasp.vulnweb.com/
http://testaspnet.vulnweb.com/
http://testphp.vulnweb.com/
http://crackme.cenzic.com
http://zero.webappsecurity.com
http://demo.testfire.net/
http://aspnet.testsparker.com
http://php.testsparker.com
http://www.webscantest.com/



http://www.enigmagroup.org/
http://exploit-exercises.com/
http://google-gruyere.appspot.com/
http://www.gh0st.net/
http://www.hackthissite.org/
http://www.hackthis.co.uk/
http://www.hackquest.com/
https://hack.me
https://www.hacking-lab.com
http://www.dareyourmind.net/
http://www.hackertest.net/
http://www.hacmegame.org/
http://hax.tor.hu/
http://www.overthewire.org/wargames/
http://www.pentestit.ru/en/
https://pwn0.com/home.php
http://rootcontest.com/
http://www.root-me.org/?lang=en
http://www.securitytreasurehunt.com/
http://www.smashthestack.org/
http://www.bright-shadows.net/
http://thisislegal.com/
http://www.try2hack.nl/
http://www.wablab.com/hackme
http://canyouxssthis.com/HTMLSanitizer/
http://xss.progphp.com/



http://securitycompass.github.io/AndroidLabs/
http://securitycompass.github.io/iPhoneLabs/
http://code.google.com/p/owasp-igoat/
https://github.com/jackMannino/OWASP-GoatDroid-Project
http://damnvulnerableiosapp.com/
https://code.google.com/p/dvaa/
https://github.com/pwnetrationguru/dvfa/
http://noconname.org/evento/wargame/
http://www.mcafee.com/us/downloads/free-tools/hacme-bank-android.aspx
http://www.paladion.net/downloadapp.html

Getting Started

Vulnerable Web Applications
OWASP BWA
OWASP Hackademic
OWASP SiteGenerator
OWASP Bricks
OWASP Security Shepherd
Damn Vulnerable Web App (DVWA)
Damn Vulnerable Web Services (DVWS)
WebGoat.NET
PentesterLab
Butterfly Security Project
Foundstone Hackme Bank
Foundstone Hackme Books
Foundstone Hackme Casino
Foundstone Hackme Shipping
Foundstone Hackme Travel
LAMPSecurity
Moth
WackoPicko
BadStore
WebSecurity Dojo
BodgeIt Store
hackxor
SecuriBench
SQLol
CryptOMG
XMLmao
Exploit KB Vulnerable Web App
PHDays iBank CTF
GameOver
Zap WAVE
PuzzleMall
VulnApp
sqli-labs
Drunk Admin Web Hacking Challenge
bWAPP
NOWASP / Mutillidae 2
SocketToMe


Vulnerable Operating System Installations
Damn Vulnerable Linux
Metasploitable
LAMPSecurity
UltimateLAMP
heorot: DE-ICE, hackerdemia
hackerdemia - 




pWnOS
Holynix
Kioptrix
exploit-exercises - nebula, protostar, fusion
PenTest Laboratory
RebootUser Vulnix
neutronstar
scriptjunkie.us
21LTR
SecGame # 1: Sauron
Pentester Lab
Vulnserver
TurnKey Linux
Bitnami
Elastic Server
CentOS


Sites by Vendors of Security Testing Software
Acunetix acuforum
Acunetix acublog
Acunetix acuart
Cenzic crackmebank
HP freebank
IBM altoromutual
Mavituna testsparker
Mavituna testsparker
NTOSpider Test Site


Sites for Improving Your Hacking Skills
EnigmaGroup
Exploit Exercises
Google Gruyere
Gh0st Lab
Hack This Site
HackThis
HackQuest
Hack.me
Hacking-Lab
Hacker Challenge
Hacker Test
hACME Game
Hax.Tor
OverTheWire
PentestIT
pwn0
RootContest
Root Me
Security Treasure Hunt
Smash The Stack
TheBlackSheep and Erik
ThisIsLegal
Try2Hack
WabLab
XSS: Can You XSS This?
XSS: ProgPHP


Mobile Apps
ExploitMe Mobile Android Labs
ExploitMe Mobile iPhone Labs
OWASP iGoat
OWASP Goatdroid
Damn Vulnerable iOS App (DVIA)
Damn Vulnerable Android App (DVAA)
Damn Vulnerable FirefoxOS Application (DVFA)
NcN Wargame
Hacme Bank Android
InsecureBankType your paragraph here.