I just stumbled across the SANS pen test poster the other day, and it has a pretty good mindmap of various vulnerable practice sites, OS builds, web apps, etc:

https://blogs.sans.org/pen-testing/files/2013/06/PosterSide1.png

 

Side 2 of the poster, just for funsies:

https://blogs.sans.org/pen-testing/files/2013/06/Poster_Summer_2013-back.png

 

Posted by CEOinIRVINE
l