Skip to main content

A curated list of sites to practice testing on

1.1k
GitHub Stars
127
Curated Resources
7
Categories
18 hours ago
Last Refreshed
Security TestingMobile TestingWeb TestingPerformance TestingTest AutomationAI TestingAPI Testing

Use this list with your AI agent

Add the Context Awesome MCP server to Claude, Cursor, or any MCP client, then ask:

"Show me web testing resources from awesome-sites-to-test-on"

Installation instructions →

What's inside

Web Testing

  • Academy Bugs

    Explore a practice test site that has 25 real bugs planted inside.

  • ATM Practice App

    ATM simulation built as a test target for requirements-based testing exercises, exploring boundary conditions, daily withdrawal limits, denomination edge cases, and underspecified requirements.

  • Automation Exercise

    Website with API backend and test case examples to practice automation. Built by

  • Black Box Puzzles

    Collection of simple puzzles that encourage exploratory testing.

  • BugBug Demo SaaS App

    A SaaS app designed to practice building automated tests for the most common SaaS testing scenarios.

  • Capture the Bugs

    Exploratory testing exercise from the Exploratory Testing Academy: explore a target app, describe each bug you spot in the report panel, use hints when stuck, then submit for scoring by an in-browser AI model that matches your findings against the known bug list. Sessions are anonymous.

Test Automation

AI Testing

  • AI Chat Bot App

    RAG chatbot answering questions about the Basic Shopping Cart app, generated via the Chrome Prompt API, for practicing AI feature testing. Part of

  • Browser AI API Pages

    Example pages for experimenting with and automating the browser's built-in AI APIs. Part of

  • Gandalf: Agent Breaker

    AI security challenge from Lakera: a simulated app store of GenAI applications where every app can be hacked. Exploit real-world AI agents with prompt injection and other attacks to learn how they fail. The classic Gandalf prompt injection game now lives here too.

API Testing

Performance Testing

Security Testing

  • bWAPP

    Downloadable web app with over 100 web vulnerabilities.

  • Damn Vulnerable GraphQL Application

  • Firing Range

    Hosted Site with multiple application security issues.

  • Gin and Juice Shop

    A modern web app that is filled with hacking challenges and vulnerabilities by PortSwigger

  • Gruyere

    A CodeLab used for university training around web application exploits.

  • LabEx Cybersecurity Labs

    Interactive hands-on cybersecurity labs covering penetration testing, web vulnerabilities, network security, and ethical hacking with real-world scenarios and step-by-step guidance

Mobile Testing

  • (DVIA) Damn Vulnerable iOS App

    DVIA is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals.

  • FrontRow

    Open-source React Native concert & events ticketing app with stable test IDs, a QA Debug Menu, deterministic seed data, and ready-to-extend scaffolds for Appium, Espresso, XCUITest, and Maestro on iOS and Android.

  • SauceLabs Sample Apps

    Github repo that contains mobile apps that can be used for automation practice.

Showing a sample of 127 resources. View the full list on GitHub →