+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.li/Forum-Website-Server-Hacking)
+--- Thread: Localhost HACK for practice! (/Thread-Localhost-HACK-for-practice)
Pages:
1
2
Localhost HACK for practice! - MrBlaise - 03-02-2013
Hello guys!
I've set up an Apache server on my Windows and my Ubuntu as well for practicing PHP etc. However I would really like to know how can I hack my localhost, like if I was an attacker from the outside. So like how can I get the MySQL password and username etc. I've made this because I'm very interested in computer security and I wanna know everything about hacking a website or a server, but I don't wanna practice on a real website, and I won't use my knowledge to do any harm. I gotta mention I'm a newbie in this, but passionate to learn!
If there is a thread like this I'm really sorry for making another one, I just don't know how to get started.
Thank you!
RE: Localhost HACK for practice! - chmod - 03-03-2013
Have you tried *webgoat* it's kind of like a lab but runs an apache server with deliberately vulnerable Web apps for you to safely pen test. All traffic is connected to your localhost, I would recommend disconnecting from your network while using it though as it would leave you open to attack
RE: Localhost HACK for practice! - MrBlaise - 03-03-2013
Thank you very much I'll download it
. Can you help me how to get started what should I do first?
RE: Localhost HACK for practice! - LiXon - 03-03-2013
Also, take a look over this :
1. BadStore
Link: http://www.badstore.net/
Platform: Perl, Apache and MySQL
Install: Meant to run by booting a Live CD, but I'd recommend using my Live CD VMX
Notes: Easy to set up, and it's nice that you can run it from a VM with a little work. Just make sure you set the VM to use the IP addresses that are only available from the local host OS (NAT or Host-only).
2. Damn Vulnerable Web App
Link: http://www.ethicalhack3r.co.uk/damn-vulnerable-web-app/
Platform: PHP, Apache and MySQL
Install: Should work on any box you can install Apache/PHP/MySQL on.
Notes: When I first posted Mutillidae, Ryan Dewhurst emailed me and told be about a project he started a few months before mine. His is also PHP/MySQL based, and looks prettier than mine.
I've yet to play with it much, but I may be using some of his code in the near future to expand Mutillidae.3. Vicnum
Link: http://sourceforge.net/projects/vicnum/
http://www.owasp.org/index.php/Category:OWASP_Vicnum_Project
Platform: PHP and Perl
Install: Should work on any box you can install Apache/PHP/MySQL on. Try it with XAMPP.
Notes: Mordecai Kraushar sent me an email about his project. The more the merrier. Here is how it is described: "A web application showing common vulnerabilities such as cross site scripting and session management issues. Helpful to IT auditors honing web security skills and to those setting up 'capture the flag' exercises. For the VM login as root/vicnum"
Happy hacking
RE: Localhost HACK for practice! - Shining White - 03-03-2013
read here : http://www.hackcommunity.com/Thread-Tutorial-Design-Your-Own-Web-Hacking-Lab-On-Windows
RE: Localhost HACK for practice! - MrBlaise - 03-03-2013
Thank you very much!! These are awesome!
RE: Localhost HACK for practice! - zomgwtfbbq - 04-19-2013
(03-03-2013, 09:06 AM)LiXon Wrote: Also, take a look over this :Thanks for posting, guess I'll stop with my development of EVE(Extremely Vulnerable Environment) then.:headbash:
1. BadStore
Link: http://www.badstore.net/
Platform: Perl, Apache and MySQL
Install: Meant to run by booting a Live CD, but I'd recommend using my Live CD VMX
Notes: Easy to set up, and it's nice that you can run it from a VM with a little work. Just make sure you set the VM to use the IP addresses that are only available from the local host OS (NAT or Host-only).
2. Damn Vulnerable Web App
Link: http://www.ethicalhack3r.co.uk/damn-vulnerable-web-app/
Platform: PHP, Apache and MySQL
Install: Should work on any box you can install Apache/PHP/MySQL on.
Notes: When I first posted Mutillidae, Ryan Dewhurst emailed me and told be about a project he started a few months before mine. His is also PHP/MySQL based, and looks prettier than mine.
3. Vicnum
Link: http://sourceforge.net/projects/vicnum/
http://www.owasp.org/index.php/Category:OWASP_Vicnum_Project
Platform: PHP and Perl
Install: Should work on any box you can install Apache/PHP/MySQL on. Try it with XAMPP.
Notes: Mordecai Kraushar sent me an email about his project. The more the merrier. Here is how it is described: "A web application showing common vulnerabilities such as cross site scripting and session management issues. Helpful to IT auditors honing web security skills and to those setting up 'capture the flag' exercises. For the VM login as root/vicnum"
Happy hacking
RE: Localhost HACK for practice! - zomgwtfbbq - 04-19-2013
(03-03-2013, 09:06 AM)LiXon Wrote: Also, take a look over this :Thanks for posting, guess I'll stop with my development of EVE(Extremely Vulnerable Environment) then.:headbash:
1. BadStore
Link: http://www.badstore.net/
Platform: Perl, Apache and MySQL
Install: Meant to run by booting a Live CD, but I'd recommend using my Live CD VMX
Notes: Easy to set up, and it's nice that you can run it from a VM with a little work. Just make sure you set the VM to use the IP addresses that are only available from the local host OS (NAT or Host-only).
2. Damn Vulnerable Web App
Link: http://www.ethicalhack3r.co.uk/damn-vulnerable-web-app/
Platform: PHP, Apache and MySQL
Install: Should work on any box you can install Apache/PHP/MySQL on.
Notes: When I first posted Mutillidae, Ryan Dewhurst emailed me and told be about a project he started a few months before mine. His is also PHP/MySQL based, and looks prettier than mine.
3. Vicnum
Link: http://sourceforge.net/projects/vicnum/
http://www.owasp.org/index.php/Category:OWASP_Vicnum_Project
Platform: PHP and Perl
Install: Should work on any box you can install Apache/PHP/MySQL on. Try it with XAMPP.
Notes: Mordecai Kraushar sent me an email about his project. The more the merrier. Here is how it is described: "A web application showing common vulnerabilities such as cross site scripting and session management issues. Helpful to IT auditors honing web security skills and to those setting up 'capture the flag' exercises. For the VM login as root/vicnum"
Happy hacking
RE: Localhost HACK for practice! - DaPaus - 04-20-2013
If you have experience setting up a virtual box I wrote a tutorial on how to set up a virtual server with a lot of these things(DVWA, Webgoat and older version of software) pre-installed.
http://www.hackcommunity.com/Thread-TUT-How-To-Set-Up-A-Pentesting-Lab
RE: Localhost HACK for practice! - DaPaus - 04-20-2013
If you have experience setting up a virtual box I wrote a tutorial on how to set up a virtual server with a lot of these things(DVWA, Webgoat and older version of software) pre-installed.
http://www.hackcommunity.com/Thread-TUT-How-To-Set-Up-A-Pentesting-Lab