- pwnos Debian VM http://www.backtrack-linux.org/forums/showthread.php?t=2748
- WebGoat Web App - https://www.owasp.org/index.php/Category:OWASP_WebGoat_Project
- Metasploitable 2 http://sourceforge.net/projects/metasploitable/files/Metasploitable2/
- Metasploitable 2 official walkthrough: https://community.rapid7.com/docs/DOC-1875
- Metasploitable 2 walkthrough blog post: http://nkush.blogspot.com/2011/09/metasploitable-walkthrough.html
- Metasploitable Ubuntu 8.04 VM http://www.offensive-security.com/metasploit-unleashed/Metasploitable
- DVWA - Damn Vulnerable Web App http://sourceforge.net/projects/dvwa/?_test=b
- Web Security Dojo - http://dojo.mavensecurity.com/
- DVL - Damn Vulnerable Linux - Discontinued, last release 1/26/09 http://distrowatch.com/table.php?distribution=dvl
- (Version 1.5 is currrently available via http://www.computerdefense.org/dvl/ (captcha))
- UltimateLAMP - http://ronaldbradford.com/tmp/UltimateLAMP-0.2.zip
- Random - VMWare Appliances http://www.vmware.com/appliances/
- Nist XP VM - http://nvd.nist.gov/fdcc/index.cfm (Renamed_Admin / P@ssw0rd123456)
- SQLoL https://github.com/SpiderLabs/SQLol
- Moth http://www.bonsai-sec.com/en/research/moth.php Vulnerable Web Apps
- De-Ice L1D1 http://www.mediafire.com/?bfo9b21g2m69tb6
- De-Ice L1D2 http://www.mediafire.com/?tnci5ewmcoyrp8o
- De-Ice L1D3 A&B http://forums.heorot.net/viewtopic.php?f=18&t=482
- De-Ice L2D1 http://www.mediafire.com/?tnci5ewmcoyrp8o
- OffSec Lab - Offensive Security Labs has 47 computers for exploitation
- Secutor Prime - http://www.threatguard.com/downloads - Windows VM for scoring/practicing hardening skills according to standards
- http://21ltr.com/scenes/21LTR.com_Scene1_2.120_v1.0.iso
- Kioptrix Level 1
- Kioptrix Level 2
- Kioptrix Level 3
- Kioptrix Level 4
- Kioptrix Downloads page - Also has lvl 4 for Hyper-V and hashes
- [[hackingdojo]] Cheap Training, Questionable Value
- [[ninja-sec]]
- US Gov Baseline Config: http://usgcb.nist.gov/usgcb_content.html
- [[Web Security Dojo]] - Web App Exploitation Training VM