Home
Calendar
Certifications
Columns
Features
Forum
Resources
Vitals
Latest Additions
April 2013 Free Giveaway Sponsor - eLearnSecurity
Human Intelligence to Navigate the Security Data Deluge
February 2013 Free Giveaway Winner of SANS CyberCon Training
Interview: Bugcrowd Founders on Herding Ninjas for Crowdsourced Bug Bounties
Network Forensics: The Tree in the Forest
March 2013 Free Giveaway Sponsor - Mile2
Book Review: Violent Python
February 2013 Free Giveaway Sponsor - SANS
Holiday 2012 Free Giveaway Winner of Metasploit Pro by Rapid7
Course Review: SANS FOR408 Computer Forensic Investigations – Windows In-Depth
The Security Consulting Sugar High
Tutorial: Fun with SMB on the Command Line
Interview: Ilia Kolochenko, CEO of High-Tech Bridge
October 2012 Free Giveaway Winner of LearningGate Training
The Broken: Assessing Corporate Security in 2012 to Make a Better 2013
EH-Net Login
Welcome Guest.
Username:
Password:
Remember me
Lost Password?
No account yet?
Register
Who's Online
We have 96 guests and 1 member online
You are here:
Home
Features
Opinions
Web Security Dojo - Recommended?
EH-Net
May 23, 2013, 10:10:55 AM
Welcome,
Guest
. Please
login
or
register
.
Did you miss your
activation email?
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
News
: Go back to The Ethical Hacker Network Online Magazine
Home Page
Home
Help
Calendar
Login
Register
EH-Net
>
Features
>
Opinions
(Moderator:
don
) >
Web Security Dojo - Recommended?
Pages: [
1
]
Go Down
« previous
next »
Print
Author
Topic: Web Security Dojo - Recommended? (Read 7326 times)
0 Members and 1 Guest are viewing this topic.
clanggedin
Newbie
Offline
Posts: 17
Web Security Dojo - Recommended?
«
on:
June 01, 2010, 01:46:28 PM »
I just came across this program and I'm looking at playing with it to learn more and penetration testing. I searched the forum before I asked the question, and did not find any reviews or opinions on if it's worth while or not.
I don't have tons of pentesting experience and want to get certified in the future, will this help me learn the tools I need?
Logged
hayabusa
Hero Member
Offline
Posts: 1633
Re: Web Security Dojo - Recommended?
«
Reply #1 on:
June 01, 2010, 02:52:36 PM »
I have limited experience with it, but had a lab setup using it, once upon a time. I seem to recall it was a pretty good primer to really get my web-thinking juices flowing, and I enjoyed working on it.
Whether it is or isn't the best (I haven't used it in some time, so I can't fairly rate it good or bad,) it's one more card in the deck, as far as having a good training lab goes. Can never hurt to setup different scenarios, as even those you think you've got 'mastered' can sometimes come back to bite you, if you're complacent.
Logged
~ hayabusa ~
"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'
OSCE, OSCP , GPEN, C|EH
secureseven
Jr. Member
Offline
Posts: 79
Re: Web Security Dojo - Recommended?
«
Reply #2 on:
June 01, 2010, 03:06:08 PM »
I've played with it for a little bit. I went between the dojo, webgoat and DVL. They are all good primers on the web dev security from what I remember. I'll be setting them up as soon as I get my new computer chock full of RAM for tons of VM labs lol.
Logged
http://twitter.com/mikesantillana
eLearnSecurity
Team Member.
xXxKrisxXx
Hero Member
Offline
Posts: 512
Re: Web Security Dojo - Recommended?
«
Reply #3 on:
June 03, 2010, 11:40:25 AM »
Metasploit Unleashed is also a good resource:
http://www.offensive-security.com/metasploit-unleashed/
Logged
eCPPT, GCIH, OSCP, OSWP
secureseven
Jr. Member
Offline
Posts: 79
Re: Web Security Dojo - Recommended?
«
Reply #4 on:
June 03, 2010, 11:59:31 AM »
I'm also trying to integrate Damn Vulnerable Web App into the Web Security dojo found here:
http://sourceforge.net/projects/dvwa/
Try it for more web practice.
Logged
http://twitter.com/mikesantillana
eLearnSecurity
Team Member.
Equix3n-
Sr. Member
Offline
Posts: 386
Re: Web Security Dojo - Recommended?
«
Reply #5 on:
June 03, 2010, 01:29:24 PM »
It doesn't include all the tools, but will definitely help you get started if you've no prior experience.
@secureseven
The latest version of Dojo includes DVWA.
Logged
secureseven
Jr. Member
Offline
Posts: 79
Re: Web Security Dojo - Recommended?
«
Reply #6 on:
June 03, 2010, 03:10:45 PM »
Ah, thanks Equix3n-
Even though it doesn't have all the tools, I'm sure in your lab you can setup the web servers and use a second VM or computer with backtrack/samurai to attack it
Also, I haven't tried it, but I've seen some stuff on Multilldae(another vulnerable web app) from IronGeek I believe.
Logged
http://twitter.com/mikesantillana
eLearnSecurity
Team Member.
Pages: [
1
]
Go Up
Print
« previous
next »
Jump to:
Please select a destination:
-----------------------------
EH-Net
-----------------------------
=> Calendar Of Events
===> ChicagoCon 2007
===> ChicagoCon 2008s
===> ChicagoCon 2008f
===> ChicagoCon 2009s
=> Ethical Hacktivism
=> News Items and General Discussion About EH-Net
===> Greetings
=> Special Events
-----------------------------
Ethical Hacking Discussions and Related Certifications
-----------------------------
=> General Certification
===> Networking
===> OS
===> Security
=> Compliance, Regulations & Standards
=> Control Systems
=> Cyber Warfare
=> Forensics
===> CCE / MCCE - (Master) Certified Computer Examiner
===> CHFI - Computer Hacking Forensic Investigator
===> EnCE - EnCase® Certified Examiner
===> GCFA - GIAC Certified Forensics Analyst
=> Hardware
=> Incident Response
===> CSIH - Computer Security Incident Handler
===> GCIH - GIAC Certified Incident Handler
=> Malware
===> Advisories
=> Mobile
=> Network Pen Testing
===> CEH - Certified Ethical Hacker
===> CPTC - Certified Penetration Testing Consultant
===> CPTE - Certified Penetration Testing Engineer
===> CSTA - Certified Security Testing Associate
===> eCPPT - eLearnSecurity Certified Professional Penetration Tester
===> ECSA - EC-Council Certified Security Analyst
===> GPEN - GIAC Certified Penetration Tester
===> OSCP - Offensive Security Certified Professional
=> Physical Security
=> Programming
=> Social Engineering
=> Web Applications
=> Wireless
===> CWNP Certs
===> GAWN - GIAC Assessing Wireless Networks
===> OSWP - Offensive Security Wireless Professional
=> Other
-----------------------------
Columns
-----------------------------
=> Editor-In-Chief
=> Andress
=> Gates
=> Haddix
=> Hadnagy
=> Heffner
=> Hoffman
=> Linn
=> RichM
=> Murray
=> J. Peltier
=> Weidman
=> Wilson
-----------------------------
Features
-----------------------------
=> /root
=> Book Reviews
=> Opinions
=> Skillz
===> Examples
===> May 06 - Star Hacks, Episode V: The Empire Hacks Back
===> July 06 - Hack Bill!
===> Sept 06 - Netcat in the Hat
===> Nov 06 - Hitch-Hackers Guide to the Galaxy
===> Dec 06 - A Christmas (Hacking) Story
===> Feb 07 - Charlottes Web Site
===> April 07 - Microsoft Office Space
===> June 07 - Serenity Hack
===> Oct 07 - Worst. Ethical. Hacker. Challenge. Ever.
===> Dec 07 - Frosty the Snow Crash
===> March 2008 - It Happened One Friday
===> Oct 2008 - Scooby Doo and the Crypto Caper
===> Dec 08 - Santa Claus Is Hacking to Town
===> Feb 2009 - Brady Bunch Boondoggle
===> July 2009 - Prison Break
===> October 2009 - SSHliders
===> December 2009 - Miracle on Thirty-Hack Street
===> December 2010 - The Nightmare Before Charlie Browns Christmas
-----------------------------
Resources
-----------------------------
=> Career Central
===> Looking For Work
===> Looking To Hire
=> Links to cool sites.
=> Mass Media
=> News from the Outside World
=> Tools
=> Tutorials
===> Tutorial Requests
Loading...
Exclusive Deal
SANSFIRE 2013
June 15 - 22
5% Off
w/ Code
:
EHN_5
SANS Deals 4 EH-Netters
5% OFF
Any
SANS Course
in Any Format!
Coupon Code:
EHN_5
Including
SANS Rocky Mountain 2013
&
SANS Boston 2013
Polls
Compared to this year, 2013 will be:
Great!
Better.
About the same.
Little worse.
FUBAR!
Recent Forum Topics
GCIH - GIAC Certified Incident Handler
: Passed my GCIH
(3) by
H1t M0nk3y
Greetings
: Hi from the UK
(3) by
UKSecurityGuy
GCIH - GIAC Certified Incident Handler
: GCIH Free Practice test attempt
(0) by
prats84
News Items and General Discussion About EH-Net
: Change is Coming to EH-Net!!
(27) by
don
Network Pen Testing
: AIX Vulnerability Assessments
(2) by
ras76
Tutorials
: Need guidance
(9) by
hanyhasan
Programming
: Finished Python Course in Codecademy now what?
(15) by
hanyhasan
Network Pen Testing
: Ruby on Rails Vulnerabilities / Attacks in BackTrack 5 r3
(0) by
SUdoctstudent
Network Pen Testing
: De-ICE 1.140 released!
(2) by
superkojiman
General Certification
: CPT Practical Submission
(1) by
UNIX
OSCP - Offensive Security Certified Professional
: Failed my first attempt at the OSCP exam
(94) by
azmatt
Tools
: Social-Engineer Toolkit (SET) Version 5.0 “The Wild West” Released
(2) by
m0wgli
Malware
: EICAR?
(3) by
UKSecurityGuy
Advisories
: HTB23154: Multiple Vulnerabilities in Exponent CMS
(0) by
AndyP
Advisories
: HTB23153: Multiple Vulnerabilities in Jojo CMS
(0) by
AndyP
Advisories
: HTB23151: Cross-Site Request Forgery (CSRF) in UMI.CMS
(0) by
AndyP
OSCP - Offensive Security Certified Professional
: Class Scheduled 6/8 - Linux n00b
(7) by
Taemyks
OSCP - Offensive Security Certified Professional
: OSCP exam scheduled
(6) by
gbhat
Incident Response
: LinkedIn Forensics
(0) by
AFENTIS_Forensics
General Certification
: Red Team/Blue Team
(1) by
ajohnson
Career Central
: Starter cert?
(3) by
Grendel
Network Pen Testing
: Beginner Ethical Hacker
(1) by
m0wgli
EH-Net News Feeds
Latest Additions
Privacy Notice
for TDCC & All Properties
© 2013 The Ethical Hacker Network
Joomla!
is Free Software released under the GNU/GPL License.
GCIH - GIAC Certified Incident Handler : Passed my GCIH
