These are some useful live websites I discovered on a hacking forum:
SPI Dynamics (live) -
h**p://zero.webappsecurity.com/
Cenzic (live)
hI**p://crackme.cenzic.com/
Watchfire (live) -
h**p://demo.testfire.net/
Acunetix (live) -
h**p://testphp.acunetix.com/
h**p://testasp.acunetix.com
h**p://testaspnet.acunetix.com