WackoPicko is a vulnerable web applications to hone your skills or test the latest web vulnerability scanner. It allows to check multiple vulnerabilities which you can test. It was first used for the paper
Why Johnny Can't Pentest: An Analysis of Black-box Web Vulnerability Scanners.