bWAPP, or a buggy web application, is a free and open source web application build to allow security enthusiasts, students and developers to better secure web applications. bWAPP prepares to conduct successful penetration testing and ethical hacking projects. It includes all vulnerabilities from the OWASP Top 10 project.
http://www.itsecgames.com