> For the complete documentation index, see [llms.txt](https://pentesting.mrw0l05zyn.cl/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://pentesting.mrw0l05zyn.cl/general/aplicaciones-vulnerables.md).

# Aplicaciones vulnerables

## Servicios

* [Metasploitable 2](https://sourceforge.net/projects/metasploitable/)
* [Metasploitable 3](https://github.com/rapid7/metasploitable3)

## Web

* [Damn Vulnerable Web App (DVWA)](https://github.com/digininja/DVWA)
* [Damn Vulnerable GraphQL Application (DVGA)](https://github.com/dolevf/Damn-Vulnerable-GraphQL-Application)
* [buggy Web APPplication (bWAPP)](https://sourceforge.net/projects/bwapp/)
* <http://www.vulnweb.com/>
* <https://www.megacorpone.com/>

## API

* [Completely Ridiculous API (crAPI)](https://github.com/OWASP/crAPI)
* [Vulnerable Adversely Programmed Interface (vAPI)](https://github.com/roottusk/vapi)