Metasploitable 2
Intentionally vulnerable Ubuntu Linux VM for testing security tools and demonstrating common vulnerabilities. Many listening services (FTP, SSH, HTTP, MySQL, PostgreSQL, VNC, etc.) provide remote entry points; compatible with VMware, VirtualBox, and other hypervisors.
Notes
Default login msfadmin/msfadmin. Use NAT and host-only adapters only; never expose to a hostile network. Download from Rapid7 or SourceForge.