I am currently working on a new project for OWASP that will combine many vulnerable web application onto one freely available, open source virtual machine. More information about the project can be found on the Project Home on Google Code.

I will be presenting on this project at:

• OWASP AppSec DC 2009 in Washington, DC on November 12, 2009
• DoD Cyber Crime Conference 2010 in St. Louis, MO on January 27, 2010

Version 0.9 of the VM for this project was released on November 11, 2009.  You can find information about the release at http://code.google.com/p/owaspbwa/wiki/Downloads.