Results 1 to 2 of 2

Thread: Exploitable Virtual Machines zum trainieren

  1. #1
    Moderator S3M73X's Avatar
    Join Date
    Feb 2010
    Posts
    103

    Post Exploitable Virtual Machines zum trainieren

    Hier sammeln wir Links zu saemtlichen Wargame-LiveSystemen oder virtuellen Maschinen an denen man Angriffe ueben kann.

    Metasploitable
    Gilt fast schon als Standard in dem Bereich. Informationen findet man auch im MSFU-Kurs:
    http://www.offensive-security.com/me...urity_Training
    http://blog.metasploit.com/2010/05/i...ploitable.html


    Ansonsten gibt es noch eine umfangreiche Liste von g0tmilk:
    http://g0tmi1k.blogspot.com/2011/03/...by-design.html

    Eine vulnerable Image von der Uni Marburg welches hauptsaechlich Web-Schwachstellen hat. (thx2pigtail)
    http://ds.mathematik.uni-marburg.de/~lbaumgaertner/vulnimage.zip

    Weitere Liste mit einigen interessanten Distributionen dafuer:
    http://bailey.st/blog/2010/09/14/pen...ications-list/

    Kioptrix
    http://www.kioptrix.com/blog/?page_id=135

    hackxor
    I'd like to introduce hackxor, a webgoat-like hacking game with a plot
    and an emphasis on realism, difficulty and actually exploiting
    vulnerabilities. It uses the amazingly nifty HtmlUnit to simulate other
    users, so you can write your own XSS/CSRF payloads. While the complete
    version is a VM image that has to be downloaded&installed aka DVWA, the
    first two levels can be played online, as SourceForge is bravely hosting
    them at http://hackxor.sourceforge.net/

    It contains XSS, CSRF, SQLi, ReDoS, DOR, command injection and plenty of
    other vulnerabilities that don't have succinct acronyms. Sadly, due to
    time constraints there aren't any timing or entropy attacks (although
    you'll have a self-inflicted time-limit if you mess up the ReDoS).
    Still, I think the later levels will be difficult enough for nearly
    everyone to have a challenge.
    Last edited by S3M73X; 04-09-2011 at 12:24 AM. Reason: update

  2. #2
    Moderator
    Join Date
    Jan 2010
    Posts
    167

    Default Re: Exploitable Virtual Machines zum trainieren


Similar Threads

  1. Problem with SET on machines outside of my LAN
    By tehryan in forum Beginners Forum
    Replies: 2
    Last Post: 08-12-2010, 01:24 PM
  2. I'd Like to join a Couple of Machines together for WPA/PMK's
    By andytof47 in forum OLD Newbie Area
    Replies: 4
    Last Post: 11-17-2009, 01:09 PM
  3. Add existing virtual machines
    By playtrack in forum OLD BackTrack 4 General Support
    Replies: 3
    Last Post: 09-09-2009, 05:28 PM
  4. Install exploitable content
    By CrispyJones in forum OLD BT3beta General
    Replies: 8
    Last Post: 06-20-2008, 11:15 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •