Metasploitable
Metasploitable is an intentionally vulnerable Linux virtual machine
...The default login and password is msfadmin:msfadmin.
Never expose this VM to an untrusted network (use NAT or Host-only mode if you have any questions what that means).
To contact the developers, please send email to msfdev@metasploit.com