RE: Vulnerable websites for testing ? 05-30-2013, 09:36 AM
#4
Another project you should check out is Mutillidae, you can download it here. It is installed just like DVWA, and it gives you hands on experience with OWASP Top 10 and other things.
It also has different security levels, and extensive hints on every single vulnerability and how they work and can be exploited.
If you just want to try out some simple sql injection you can check out http://sqlzoo.net/hack/
I'm currently working on a vulnerable web application myself, hosted on github. I just have a lot of things to do atm so the progress is a bit slow.
This application also has some tools for trying and saving successful attack strings for sqli and xss. For a preview you can see here
It also has different security levels, and extensive hints on every single vulnerability and how they work and can be exploited.
If you just want to try out some simple sql injection you can check out http://sqlzoo.net/hack/
I'm currently working on a vulnerable web application myself, hosted on github. I just have a lot of things to do atm so the progress is a bit slow.
This application also has some tools for trying and saving successful attack strings for sqli and xss. For a preview you can see here