Available online to play

• Over The Wire
• WeChall
• Smash The Stack
• Infosec Institute CTF
• TryHackMe

Need to download and deploy on own host

• Damn Vulnerable Web Application - DVWA
• Google Gruyere - Web Application Exploit and Defense
• Eploit Exercise
• OWASP Juice Shop