Hack.me hosts a number of vulnerable apps and allows its community to build, host and share their vulnerable application code for educational and research purposes.
Hack The Box is an online platform allowing you to test your penetration testing skills and exchange ideas and methodologies with other members of similar interests.
Hack This Site is more than just another hacker wargames site, it’s a living, breathing community with many active projects in development.
Try2Hack provides several security oriented challenges for your entertainment.
HackThis is a legal and safe network security resource where users test their hacking skills on various challenges and learn more about hacking.
CTF365 allows you to defend your servers and launch attacks on others, all using the exact same techniques that work in the real world.
OverTheWire helps you learn and practice security concepts in the form of fun-filled games.
Hacking-Lab is providing CTF and mission style challenges for international competitions, like the European Cyber Security Challenge.
Pwnable.kr is a non-commercial wargame site which provides various pwn challenges regarding system exploitation.
SmashTheStack is a wargaming Network hosting several wargames.
IO is a wargaming community with several free wargames available.
Microcorruption is an embedded security CTF where you have to reverse engineer fictional Lockitall electronic lock devices.
W3Challs is a penetration testing platform, which offers various computer challenges, in categories related to security: Hacking, Cracking, Wargame, Forensic, Cryptography, Steganography and Programming.
PWN0 is the VPN where (almost) anything goes, that allows you to go up against pwn0bots or other users and score points by gaining root on other systems.
Hellbound Hackers is a completely legal, web-based security training ground, offering challenges that teach you how computer based exploits work.
Damn Vulnerable iOS App (DVIA) provides a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment.
Root Me allows you to practice your ethical hacking skills across a variety of scenarios.
CTFtime is great resource to stay up-to-date on CTF events happening around the globe.
WebGoat is an insecure app available for Windows, OS X Tiger and Linux and also runs in Java and .NET environments.
Hackademic is an OWASP open-source project and offers 10 realistic scenarios which are full of vulnerabilities
Hackxor is a web app hacking game focusing on cross-site scripting, cross-site request forgery and SQL injection vulnerabilities.
BodgeIt Store is a vulnerable web application which is currently aimed at people who are new to pen testing.
EnigmaGroup is designed for anyone that wishes to improve their security knowledge and hosts a wide variety of vulnerabilities
Google Gruyere is designed for the absolute beginner to learn how hackers find security vulnerabilities, how they exploit web applications and how to protect applications from being exploited.
Tools to legally practice your ethical hacking skills are not what’s missing on the web, and some really good ones are even free to use. Let us know if you’ve tried some other good ones and think they’d be a great addition to this list.
Link : https://blog.elearnsecurity.com/free-resources-to-legally-practice-ethical-hacking.html?fbclid=IwAR1qJBUQoGjlQJXiOjJatb85nGl_FHwLg9_BZyq-qweg7fM615mo2TXpQ7M