For web application testing, we'll use Bee-Box, which comes with bWAPP—a ridiculously vulnerable web application. It contains over 100 web vulnerabilities including SQL injection, XSS, and CSRF.
🐝
Bee-Box
bWAPP - A Ridiculously Vulnerable Web App
⚠️ CONTAINS 100+ WEB VULNERABILITIES - LAB USE ONLY