,

Vulnerable web applications to play with

Posted by

–

This is just a list with applicaitons and frameworks out there that could be used to test your web application pentesting kung fu skills or to test your automated tools.

I am trying to keep copy of those with me, because projects tend to die. So if you find that some of the links is dead, please let me know to remove it or to link to local copy of the thingy.

Enjoy!

Project nameProject home pageTechnologies/Frameworks
OWASP brickshttp://sechow.com/bricks/PHP, MySQL
NOWASP (Mutillidae)http://sourceforge.net/projects/mutillidae/PHP, MySQL
DVWA (Damn Vulnerable Web Application)http://www.dvwa.co.ukPHP, MySQL
OWASP WebGoat Projecthttps://www.owasp.org/index.php/Category:OWASP_WebGoat_Project.NET, J2EE
InsecureWebApphttp://insecurewebapp.sourceforge.net/main/index.htmlJ2EE (JSP)
exploit.co.il Vulnerable Web Apphttp://sourceforge.net/projects/exploitcoilvuln/PHP
hackxorhttp://hackxor.sourceforge.netPerl, MySQL
LAMP Security Traininghttp://sourceforge.net/projects/lampsecurity/PHP, MySQL
BodgeIt Storehttp://code.google.com/p/bodgeit/J2EE (JSP)
Mothhttp://www.bonsai-sec.com/en/research/moth.phpPHP, MySQL
OWASP Vicnumhttp://sourceforge.net/projects/vicnum/PHP, Perl
Hack Me Bankhttp://www.mcafee.com/us/downloads/free-tools/hacme-bank.aspx.NET 1.1, MSSQL
Hack Me Bank – Androidhttp://www.mcafee.com/us/downloads/free-tools/hacme-bank-android.aspxJava 1.6 and up, Android SDK
Hack Me Bookshttp://www.mcafee.com/us/downloads/free-tools/hacmebooks.aspxJava 1.4 and up
Hack Me Casionhttp://www.mcafee.com/us/downloads/free-tools/hacme-casino.aspxRuby on Rails
Hack Me Shippinghttp://www.mcafee.com/us/downloads/free-tools/hacmeshipping.aspxColdFusion, MySQL
Hack Me Travelhttp://www.mcafee.com/us/downloads/free-tools/hacmetravel.aspx.NET 1.1, C++

One response

  1.  Avatar
    Anonymous

Leave a Reply

Your email address will not be published. Required fields are marked *

ePsiLoN's Information Security Blog
Privacy Overview

This website uses cookies for security purposes only. We do not track you or see your data.