multi-os multi-arch
Vulnerable VM
Damn Vulnerable Web Application (PHP/MySQL)
https://github.com/ethicalhack3r/DVWA
http://www.dvwa.co.uk/
LambHack (Lambda)
Metasploitable (Linux)
Mutillidae (PHP)
NodeGoat (Node)
OWASP Juice Shop (NodeJS/Angular)
RailsGoat (Rails)
WebGoat (Web App)
WebGoat.Net (.NET)
WebGoatPHP (PHP)
https://github.com/rapid7/metasploit-framework