Years ago, there weren’t really good listings of various vulnerable virtual machines, vulnerable web apps, shady packet captures, or other challenges that you could learn from, so I kept my own list here on my site. These days, however, Vulnhub.com offers a far better listing than I could keep. So I might reorganize my “learn” section of links, but for now, these will stick around and I’ll refer to Vulnhub for my damn vulnerable VM itch.