2 repositories on SrcLog
OWASP VulnerableApp Project: For Security Enthusiasts by Security Enthusiasts.
VulnerableApp-facade is probably most modern lightweight distributed farm of Vulnerable Applications built for handling wide range of vulnerabilities across tech stacks.