OWASP Mutillidae 2
OWASP Mutillidae II is a deliberately vulnerable web application that is perfect for security lab training. It is focused around learning and practicing the OWASP top vulnerabilities. The version of Mutillidae that comes with Metasploitable2 is older, if you want the more up to date version, you can install it as a standalone VM. There are several ways to install Mutillidae, each are covered on the Tool Author’s YouTube Channel. You can install it any way you like. For this book, I installed it on an Ubuntu VM and it worked very well.
Each install method is covered extensively on the tool author’s YouTube site:
Again, you can follow any of the tool author’s install methods, whatever works best for your environment. I chose running it directly on Ubuntu - Here is a brief install overview.