The Ethical Hacker Network - Vulnerable web apps to practice on

EH-Net > Ethical Hacking Discussions and Related Certifications > Web Applications (Moderator: don) > Vulnerable web apps to practice on

Pages: [1] Go Down

« previous next »

	Author	Topic: Vulnerable web apps to practice on (Read 6685 times)
0 Members and 1 Guest are viewing this topic.

T_Bone

Full Member

Offline

Posts: 199

Vulnerable web apps to practice on

« on: March 09, 2009, 01:24:05 PM »

Hi All

I am very new to penetration testing and am currently setting up a little virtual lab to perform tests on. I have downloaded Foundstones hackmebank/hackmebooks etc and WebGoat, are there any other sites available that provide vulnerable apps to test?

Thanks all


	Logged

Chan

Newbie

Offline

Posts: 32

Re: Vulnerable web apps to practice on

« Reply #1 on: March 09, 2009, 01:46:28 PM »

Could be an idea to download real apps the have known vulns and install them. phpVBB seems to have a long history of vulns, might be an idea to start there?

There's also the Damn Vulnerable Linux distro that has some tutorials and specially written apps, and de-ice (which I'm currently looking at so couldn't tell you more...)

HTH

Chan


	Logged

CCNA, 100m Swimming cert.

sethmisenar

Newbie

Offline

Posts: 24

Re: Vulnerable web apps to practice on

« Reply #2 on: March 13, 2009, 09:46:08 AM »

Adrian Crenshaw on his site, http://www.irongeek.com, has a good list of intentionally vulnerable web applications.

He even has started work on Mutillidae, which is a PHP, Apache, MySQL application that intends to illustrate the OWASP Top 10 vulnerabilities.

http://www.irongeek.com/i.php?page=security/deliberately-insecure-web-applications-for-learning-web-app-security

Hope this helps.

Seth Misenar