Live Vulnerable Sites

These are deliberately vulnerable web applications used for educational and testing purposes.

Testfire.net - Vulnerable Banking Application

OWASP Juice Shop - Vulnerable Shopping Application

Google Gruyere - Google Developed app with various by-design vulnerabilities

bWAPP - Open-source vulnerable web app with web vulnerabilities for practice.