The-Art-of-Hacking/websploit ? reverse-engineered prompt

Build me a cybersecurity training lab I can run locally in Docker on a Kali or Parrot VM.

I want a setup that starts a bunch of intentionally vulnerable web apps and challenge boxes, with simple commands to install everything and bring the lab up or down. It should include the big training targets like WebGoat, Juice Shop, DVWA, plus a set of custom practice labs for things like SQL injection, XSS, SSRF, command injection, path traversal, XXE, JWT issues, SSTI, insecure deserialization, GraphQL problems, and prototype pollution.

Please make it feel like a real hands on learning environment for ethical hacking, bug hunting, incident response, and threat hunting, with clear network addresses or easy ways to find each service. If there are any setup details that depend on current Docker behavior or platform quirks, look up the latest docs online if you need to.