Free and open source deliberately insecure web application (a buggy web app). Helps security enthusiasts, developers and students discover and prevent web vulnerabilities and prepare for penetration testing and ethical hacking. Over 100 web bugs; covers all major known web vulnerabilities including OWASP Top 10. Part of ITSEC GAMES; bee-box VM available.