SQL injection

the_hutch

Does anybody know of any website that has preconfigured vms that can be downloaded and attacked with SQL injection?

matt333

the only thing I am familiar with is DVWA... which is basically you install a web server( XAMP or WAMP) and download DVWA then I believe there is a section for SQL injection among other security related goodies.

Damn Vulnerable Web App | Free Security & Utilities software downloads at SourceForge.net
Link ^^

the_hutch

Nice...lol. The description is amusing. I downloaded it. I'll probably play around with it this weekend.

JDMurray

I highly recommend Googling Webgoat SQL injection.

Chard26

Kioptrix - Kioptrix: Learning Security Together

Hackerdemic - http://hackademic.net/

DE-ICE - http://www.de-ice.net/


Hope this helps

Chard

the_hutch

You guys are awesome. I'll check em out.