[JesseH]

Hey,
I wanted to ask this, not only for myself, but for those who think it's smart to go out, and try out things they learn on random victims. :nono:

Once I learn something, how do I test it?

Let's say I learn about SQLI, I don't just go up to a site just to try it out. That is a good way to land me in jail, no?
I could possibly run a local website, and try it out that way. That is very doable.

What about testing other things that require a dedicated machine? I do not have one, so how would I test things like that out?
With minimal resources, I want to try out, and learn as much as I can. So I guess I am looking for ways to put my knowledge to practice, so that it will hopefully stick. I do not want to get into trouble though, I want to stay on the good side of the law.
If I didn't sound clear, any answers are still very much appreciated.

JesseH

[Ex094]

I got a perfect thing for you, You can set this up on your local server via WAMPP etc and you can test SQLi on it. It's called Damn Vulnerable Web Application, Get it from here http://www.dvwa.co.uk/, This will help you setup a Total Penetration testing Lab on your local server so you won't be needing to test your stuff online and get caught (https://www.owasp.org/index.php/Category...at_Project)
Have fun learning in a legit manner

[drvijayy2k2]

LOL,

Learn by your self, Hack something or some site, doesnt matter how you did that.
but if you want to become hacker or ethical hacker, all in your hands..

Do hack the site, send the feedback to them [site admin], says , these are all the problems in your site and here is the answer by myself or some links which is helpful to them to fix it.


Finally : "how do I test it? " , with out putting effort, you cant achieve anything in any way.


Thanks
Vijay

Hey,
I wanted to ask this, not only for myself, but for those who think it's smart to go out, and try out things they learn on random victims. :nono:

Once I learn something, how do I test it?

Let's say I learn about SQLI, I don't just go up to a site just to try it out. That is a good way to land me in jail, no?
I could possibly run a local website, and try it out that way. That is very doable.

What about testing other things that require a dedicated machine? I do not have one, so how would I test things like that out?
With minimal resources, I want to try out, and learn as much as I can. So I guess I am looking for ways to put my knowledge to practice, so that it will hopefully stick. I do not want to get into trouble though, I want to stay on the good side of the law.
If I didn't sound clear, any answers are still very much appreciated.

JesseH

[Asuna_mybb_import7736]

You could ask an admin permission to try to exploit.

[Nailo]

you need passion to go all the way through it now the question is do you have it??

[JesseH]

Hey,
Too the guy with 8 posts, I don't think your reply is even worth responding to, but here it goes.
First off, if you would have read what I said you would understand what I meant....Please read more then just the topic name to answer my question, it makes you look rather ignorant not doing so.
Anyhow, thanks guys for the input.
Yes, yes I do have the passion.
I have been thinking of an idea for software that will "simulate" some things, like DoSing and what not without really doing it. I will think more on these things and any input about this would be nice.
( I need to quote people next time, but the one that I responded too should know who he is )

JesseH