Web Security Dojo is a preconfigured, stand-alone training environment for Web Application Security. Virtualbox and VMware versions for download. See "View all files" for VMware version.
username: dojo
password: dojo
Features
ethical hacking sandbox
pre-configured vulnerable targets
common web hacking tools
training materials and user guides for some targets
https://sourceforge.net/projects/websecuritydojo/
https://www.mavensecurity.com/resources/web-security-dojo