OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

The ZAP by Checkmarx Core project

Web path scanner

Open-Source Unified Vulnerability Management, DevSecOps & ASPM

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

A list of web application security

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

w3af: web application attack and audit framework, the open source web vulnerability scanner.

Open Source Vulnerability Management Platform

Git All the Payloads! A collection of web attack payloads.

Next generation web scanner

8 Lessons, Kick-start Your Cybersecurity Learning.

OWASP Community Pages are a place where OWASP can accept community contributions for security-related content.

A vulnerable version of Rails that follows the OWASP Top 10

ZAP Add-ons

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

OWASP VulnerableApp Project: For Security Enthusiasts by Security Enthusiasts.

OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.