Welcome To Crax Forum!

By registering with us, you'll be able to discuss, share and private message with other members of our community.

SignUp Now!

russian_plug

Administrator
Staff member
Member
Joined
Jul 4, 2023
Messages
431
Credits
72,518
Points
2,127
Good morning everyone, in touch Pavluu. I bring to your attention a selection of sites for the practice of hacking. We have collected the most famous projects here.

1. bWAPP
bWAPP stands for Buggy Web Application. This resource is open source specifically to show what an unsafe web resource looks like. It was created by a developer named Malik Messelem. In this web application, you will find over 100 common problems covered in Owasp Top 10.
bWAPP is built in PHP using MySQL. For more advanced bWAPP users, the developers offer bee-box, a Linux virtual machine that comes with bWAPP already preinstalled.

2. Damn Vulnerable IOS App (DVIA)
DVIA was developed as an insecure mobile app running iOS 7 and above. For mobile developers, this platform is especially useful because there are very few sites for ethical hacking of mobile applications.
To get started with DVIA, watch the YouTube tutorial and read the Getting Started guide.

3. Google Gruyere
This site is full of holes and is intended for those who are just starting to learn about application security.

With the help of the site you will learn:
  • how hackers find security vulnerabilities
  • how hackers use web applications
  • how to stop hackers from finding and exploiting vulnerabilities
“Unfortunately, Gruyere has several security bugs, ranging from cross-site scripting and cross-site request forgery to information disclosure, denial of service and remote code execution,” the website says. "The purpose of this web application is to help you discover some of these errors and learn how to fix them both in Gruyere and in practice."

4. HackThis !!
HackThis !! was designed to teach you how to hack, dump, deface and protect your site from hackers. HackThis !! offers over 50 difficulty levels in addition to a lively and active online community. All of this together makes the resource one of the best for ethical hacking and security news sharing.

5. Hack This Site
Hack This Site is a place for anyone looking to practice ethical hacking. This resource contains hacker news, articles, forums, tutorials, and the creators' drive to teach users ethical hacking with skills developed through various tasks.

6. Hellbound Hackers
Hellbound Hackers is a hands-on approach to computer security. This resource offers a wide range of issues to teach how to identify and eliminate exploits. Hellbound Hackers is one of the best sites for ethical hacking practice, covering a wide range of topics from encryption and hacking to social engineering. With 100,000 registered users, it is also one of the largest hacking communities out there.

7. HackMe sites from McAfee
Foundstone is an ethical hacking practice led by McAfee. The company launched in 2006 a series of websites aimed at penetration testers and information security professionals looking to improve their skills. Each simulated application offers a real challenge based on real vulnerabilities. From mobile banking apps to booking apps. These projects cover a wide range of security issues to help any information security professional stay one step ahead of hackers.

List of sites:
  • Hacme Bank
  • Hacme Bank for Android
  • Hacme Books
  • Hacme Casino
  • Hacme Shipping
  • Hacme Travel
8. Mutillidae
Another OWASP project on our list. Mutillidae is a vulnerable web application built for Linux and Windows. The project is a set of PHP scripts containing the ten most common vulnerabilities according to OWASP. Also, the resource is not deprived of tips to help users in the initial stages.

9. OverTheWire
OverTheWire is great for developers and security professionals of all levels. This practice comes in the form of a fun war - players must start at the "bandit" level, where the basics are taught. The more you practice, the higher the level you will reach. With each new level, the tasks become more and more difficult, and the solutions become more confusing and confusing.

10. OWASP Juice Shop Project
OWASP Juice Shop is an ethical hacking practice web application written entirely in JavaScript, covering the top ten OWASP list and other serious security holes.

11. Peruggia
Peruggia is a secure environment for developers and security professionals. It allows you to study and test common attacks against web applications. Peruggia is a bit like an archive of projects, where you can download one of them to learn how to find and limit potential problems and threats.

12. Root Me
Root Me is a great way to test yourself, improve your ethical hacking skills, and improve your web security knowledge with over 200 different assignments.
 
Top