- vAPI -Last Update February 2022
- Deliberately Insecure Web-App (DIWA) -Last Update January 2020
- OWASP Juice Shop -Last update 13 July 2022
- OWASP Deliberately Vulnerable Web Applications Directory -Continuously Updated
- OWASP completely ridiculus API aka crAPI -18 July 2022
- SecDevLabs - 22 July 2022 (-collection of labs to go over 2021 OWASP top 10)
- Damn Vulnerable Web Application (DVWA) -15 July 2022