[A.W.H]

Have a look at Mutillidae. For learning pentesting against web application vulnerabiliites such as, SQL, XSS, Code execution etc. Easily set up on XAMMP.

[Roxy_30]

Theres alot of vulnerable Vm's and local host sites. Webgoat is fantastic a little bit advanced for beginners. Then there is Dvwa. This is a great vulnerabilty application, which you can host from xampp. Id suggest looking into hosting from xampp or similair hoating options

[MrGeek]

If you want to learn web application hacking...
you should take one of those packages mentioned above.

If you want to learn about Privilege Escalation..
A series of Vulnerable (or) Challenging Servers are out there...
If you need any help just post it

[chmod]

Thank you very much!!

Thanks for what? The OP asked a question don't spam the forum and don't dig up old threads.
/closed