Any demo site for testing sql injection or xss

[mayank verma]

hi 

   if any one know demo site for testing sql injection or xss plz share it...

--
Regards
Mayank 

[Tamilarasan Rathinagiri]

testfire.net is one such site with many other vulnerabilities.

Tamil.

--
Get ready for the Dilli Shakedown!
nullcon security conference Delhi Sept 26-29th 2012
http://nullcon.net
 
null - Spreading the right Information
null Mailing list charter: http://null.co.in/section/about/null_list_charter/
 
 

[w3bd...@gmail.com]

There is a load of such websites compiled here
http://securitythoughts.wordpress.com/2010/03/22/vulnerable-web-applications-for-learning/

Sent from BlackBerry® on Airtel

---

From: Tamilarasan Rathinagiri <tamilar...@gmail.com>

Sender: null-...@googlegroups.com

Date: Thu, 6 Sep 2012 18:16:13 +0530

To: <null-...@googlegroups.com>

ReplyTo: null-...@googlegroups.com

Subject: Re: [null] Any demo site for testing sql injection or xss

[warri0r_]

You can also use DVWA and Webgoat to host in your own system and test.

[Abdul Rehaman]

Few more which might help you...

http://www.punter-infosec.com/vulnerable-web-applications-to-learn-web-application-testing-skills/

http://g0tmi1k.blogspot.in/2011/03/vulnerable-by-design.html

http://code.google.com/p/websecurify/wiki/DemoSites 

Regards,

Rehaman

[Nikhil Kulkarni]

U can use DVWA...
And there is one more set of series of videos on Securitytube from the author named Audi1 who gives a testbed to download and test ur sql skills... But this is kinda basic...
But u can use DVWA... Thats the best way to test your skills...:)

Regards,
Nikhil Kulkarni(Intrud3r)

[null]

Alternatively,

u may find our very own game|over worth trying out: http://null.co.in/2012/06/14/gameover-web-pentest-learning-platform/

Cheers,

@

--
Get ready for the Dilli Shakedown!
nullcon security conference Delhi Sept 26-29th 2012
http://nullcon.net
 
null - Spreading the right Information
null Mailing list charter: http://null.co.in/section/about/null_list_charter/
 
 

--
Cheers,
@seem

[AMol NAik]

Check out this thread from garage4hackers:

http://www.garage4hackers.com/f11/vulnerable-web-applications-learn-web-application-testing-skills-147.html 

Regularly updated with new apps.

AMol NAik

[Abir Banerjee]

http://www.felipemartins.info/2011/05/pentesting-vulnerable-study-frameworks-complete-list/ 

Regards,

Abir

[rupesh kumar]

Can we able to capture the URL's of the webgoat in paros or burpsuite.

[Anant Shrivastava]

you will be if you just remove localhost from "no proxy for" setting in your browser :P

-Anant

On Fri, Sep 7, 2012 at 11:17 PM, rupesh kumar <thisisr...@gmail.com> wrote:

Can we able to capture the URL's of the webgoat in paros or burpsuite.

[SAN THO]

Jovin aka j0k3r did a good job here  http://null.co.in/2012/06/14/gameover-web-pentest-learning-platform/ 

all you need to do is just host it in a VM and practice...practice....practice... and a little more practice..

All the Best

--

@s4n70