Page 2 of 2 FirstFirst 12
Results 11 to 13 of 13

Thread: Looking to learn web application testing, any pointers?

  1. #11
    Just burned his ISO
    Join Date
    Feb 2010
    Lynnwood, Wa

    Default Re: Looking to learn web application testing, any pointers?

    Here is a site i have used in the past.

    It is pretty good. It offers easy challenges and then some more advanced and difficult challenges.
    There is a forum for support. They wont tell you how to solve the problems but they will give you reasonable hints if you get stuck.
    Try it out.

    Hack This Site!

  2. #12
    Just burned his ISO
    Join Date
    May 2010

    Default Re: Looking to learn web application testing, any pointers?

    Quote Originally Posted by thorin View Post
    Maybe I'm missing something but I fail to see how a metasploit course is going to help him with Web Application testing.

    That being said, I suggest you checkout:
    - the Open Web Application Security Project (OWASP), they have a testing guide and other docs/projects that will be of use.
    - WebGoat is a leaning app/tutorial for Web App security.
    - SANS has a web applicaiton security course that might be of interest to you (GWAPT if I recall correctly)

    Deliberately Insecure Web Applications For Learning Web App Security (WebGoat, BadStore, Hacme, SecuriBench, WebMaven)

    I would recommend checking out the OSSTMM (ISECOM - Making Sense of Security) too!
    Id recommend it be first on the list.. but im biased

  3. #13
    My life is this forum thorin's Avatar
    Join Date
    Jan 2010

    Default Re: Looking to learn web application testing, any pointers?

    Additional resources:
    Quote Originally Posted by RickWanner@SANSISC
    Tor sent in a link to a Google code page on Web Security. This page provides links to several good web app pen testing and defense resources. The most intriguing of which is the Jarlsberg codelab. Essentially Jarlsberg is a buggy web app that you can hack to learn web app pen testing and defense.

    From the Jarlsberg introduction page:

    "This codelab is built around Jarlsberg /yärlz'·bərg/, a small, cheesy web application that allows its users to publish snippets of text and store assorted files. "Unfortunately," Jarlsberg has multiple security bugs ranging from cross-site scripting and cross-site request forgery, to information disclosure, denial of service, and remote code execution. The goal of this codelab is to guide you through discovering some of these bugs and learning ways to fix them both in Jarlsberg and in general. "

    Sounds like fun.

    -- Rick Wanner - rwanner at isc dot sans dot org
    SANS Internet Storm Center Diary 2010-05-06 Learn about web app hacking and defense
    Last edited by thorin; 05-28-2010 at 03:05 PM.
    I'm a compulsive post editor, you might wanna wait until my post has been online for 5-10 mins before quoting it as it will likely change.

    I know I seem harsh in some of my replies. SORRY! But if you're doing something illegal or posting something that seems to be obvious BS I'm going to call you on it.

Page 2 of 2 FirstFirst 12

Similar Threads

  1. Browser collection for testing client sides
    By m-1-k-3 in forum Experts Forum
    Replies: 6
    Last Post: 02-19-2010, 07:32 PM
  2. I need to learn a couple of things
    By rc0101 in forum Beginners Forum
    Replies: 5
    Last Post: 01-26-2010, 11:51 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts