CloudSecLabs
scanme.nmap.org – use to do test scans
https://information.rapid7.com/download-metasploitable-2017.html – exploitable VM