server to practice on ?

[floodhound2]

Are there servers around that one can practice javascript injection on? SQL?

[ayu]

Well legally there are a two options that I can think of.

1: Use site like the one below

Code: Select all

https://www.hackthissite.org/

2: Install VirtualBox and create a server where you put up either your own practise website or install some web application that has a known vulnerability

[bad_brain]

if you're going for #2 (which is the better way imo because way more opportunities to learn):
http://sourceforge.net/projects/mutillidae/" onclick="window.open(this.href);return false;

[floodhound2]

Thanks.

[Kirk]

the link BB posted is some fantastic software. i would definitely recommend that one. i have also used the site cats gave. they have a good forum to reference but i think the installed software from BB has even more stuff. they have a tone of videos on it. plus you can do more and its more plausible.