Primary attack platform (free download) - **VirtualBox or VMware** — Virtualization (VirtualBox is free) - **Metasploitable 2/3** — Intentionally vulnerable targets (free) - **DVWA** — Damn Vulnerable Web Application (free) - **OWASP Juice Shop** — Modern vulnerable web app (free) - **Burp Suite Com