Damn Vulnerable Web App (DVWA)

Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is damn vulnerable.

Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and aid teachers/students to teach/learn web application security in a class room environment.

DVWA-1.0.7.iso (Size: 480 MB)

LAB IN A BOX

The only pentesting course which gives you the access to the virtual penetration testing lab, where you can train your skills in a real-life situations.

The BackTrack Linux 5r2-PenTesting Edition lab is an all-in-one penetration testing lab environment that includes all of the hosts, network infrastructure, tools, and targets necessary to practice penetration testing. It includes:

• A master (base) host utilizing BackTrack Linux 5r2
• A DMZ network with two hosts (targets)
• An “internal” network with one host (target)
• A pre-configured firewall

This lab has some of the most popular penetration testing tools pre-installed and a number of vulnerabilities to discover and exploit. This all-in-one solution is the easiest and fastest method of building a full penetration testing lab environment for practicing your skills!

DOWNLOAD

Damn Vulnerable Linux: 1.1 (Blackhat Edition)

DVL 1.1 (Black Hat Edition):

The following important files have been added (minor tool additions not listed):

• Metsploit 3.0 Framework. The Metasploit Framework is a development platform for creating security tools and exploits. The framework is used by network security professionals to perform penetration tests, system administrators to verify patch installations, product vendors to perform regression testing, and security researchers world-wide. The framework is written in the Ruby. programming language and includes components written in C and assembler.
• Web Exploitation Package 02. Includes 4 real life web targets.
• Crackme Package 01. Includes 61 Linux crackmes for reverse code engineering challenges.
• Debug Contest Package Windows. Includes 11 compiled Windows targets for analysis challenges.
• Binary Exploitation Package 01. Includes 24 compiled targets for binary exploitation.
• Binary Exploitation Package 02. Includes 40 compiled targets by Gera for binary exploitation.
• Binary Exploitation Package 03. Includes 6 compiled targets by Juliano for binary exploitation.
• Binary Exploitation Package 04. Includes 5 compiled targets by IITAC for binary exploitation.
• Pre-Configured vulnerable PHP.ini.
• Adapted .bashrc for HLA Assembly Language integration.
• All collectable sources code examples for HLA Assembly Language programming.
• Wine for Windows target analysis.
• xcalc calculator.
• rar.
• VGUI.
• VIM (VI Improved).
• A comprehensive collection of core utils.
• Outguess Steganography.
• Steghide Steganography.
• Scite Editor for many languages including Assembly.

Source: http://web.archive.org/web/20071012190055/http://blog.damnvulnerablelinux.org/2007/04/

DVL_Blackhat_1_1.iso :: (Size: 191 MB)

De-ICE: 1.100 (Level 1)

SCENARIO

The scenario for this LiveCD is that a CEO of a small company has been pressured by the Board of Directors to have a penetration test done within the company. The CEO, believing his company is secure, feels this is a huge waste of money, especially since he already has a company scan their network for vulnerabilities (using nessus). To make the BoD happy, he decides to hire you for a 5-day job; and because he really doesn't believe the company is insecure, he has contracted you to look at only one server - a old system that only has a web-based list of the company's contact information.

The CEO expects you to prove that the admins of the box follow all proper accepted security practices, and that you will not be able to obtain access to the box. Prove to him that a full penetration test of their entire corporation would be the best way to ensure his company is actually following best security practices.

CONFIGURATION

PenTest Lab Disk 1.100: This LiveCD is configured with an IP address of 192.168.1.100 - no additional configuration is necessary.

Pentest Machine:

Your second system will use the BackTrack (v.2) LiveCD as provided by remote-exploit.org. A copy of the LiveCD can be downloaded from remote-exploit.org. This disk is configured to obtain an IP address through DHCP - thus no additional configuration is required. All tools necessary to exploit Disk 1.100 can be found on the BackTrack Disk. No additional installations will be necessary.

Router Configuration:

The PenTest Lab system and the PenTest machine must connect to a router that has been configured with the following values: + DHCP Server: active + Pool Starting Addr.: 192.168.1.2

LAN TCP/IP: + IP Address: 192.168.1.1 + IP Subnet Mask: 255.255.255.0

Source: http://forums.hackingdojo.com/viewtopic.php?f=16&t=15

DOWNLOAD :: (Size: 196 MB)

De-ICE: 1.110 (Level 1)

SCENARIO

The scenario for this LiveCD is that a CEO of a small company has tasked you to do more extensive penetration testing of systems within his company. The network administrator has reconfigured systems within his network to meet tougher security requirements and expects you to fail any further penetration attempts. This system is an ftp server used by the network administrator team to create / reload systems on the company intranet. No classified or sensitive information should reside on this server. Through discussion with the administrator, you found out that this server had been used in the past to maintain customer information, but has been sanitized (as opposed to re-built).

Prove to the network administrator that proper system configuration is not the only thing critical in securing a server.

CONFIGURATION

PenTest Lab Disk 1.110:

This LiveCD is configured with an IP address of 192.168.1.110 - no additional configuration is necessary.

Pentest Machine

Your second system will use the BackTrack (v.2) LiveCD as provided by remote-exploit.org. A copy of the LiveCD can be downloaded from remote-exploit.org. This disk is configured to obtain an IP address through DHCP - thus no additional configuration is required. All tools necessary to exploit Disk 1.110 can be found on the BackTrack Disk. No additional installations will be necessary.

Router Configuration:

The scenario for this LiveCD is that a CEO of a small company has tasked you to do more extensive penetration testing of systems within his company. The network administrator has reconfigured systems within his network to meet tougher security requirements and expects you to fail any further penetration attempts. This system is an ftp server used by the network administrator team to create / reload systems on the company intranet. No classified or sensitive information should reside on this server. Through discussion with the administrator, you found out that this server had been used in the past to maintain customer information, but has been sanitized (as opposed to re-built).

Prove to the network administrator that proper system configuration is not the only thing critical in securing a server.

PenTest Lab Disk 1.110:

This LiveCD is configured with an IP address of 192.168.1.110 - no additional configuration is necessary.

Your second system will use the BackTrack (v.2) LiveCD as provided by remote-exploit.org. A copy of the LiveCD can be downloaded from remote-exploit.org. This disk is configured to obtain an IP address through DHCP - thus no additional configuration is required. All tools necessary to exploit Disk 1.110 can be found on the BackTrack Disk. No additional installations will be necessary.

The PenTest Lab system and the PenTest machine must connect to a router that has been configured with the following values: + DHCP Server: active + Pool Starting Addr.: 192.168.1.2

LAN TCP/IP: + IP Address: 192.168.1.1 + IP Subnet Mask: 255.255.255.0

Source: http://forums.hackingdojo.com/viewtopic.php?f=16&t=17

DOWNLOAD :: (Size: 235 MB)

De-ICE: 2.100 (Level 2)

Scenarion
The scenario for this LiveCD is that you have been given an assignment to test a company's 192.168.2.xxx network to identify any vulnerabilities or exploits. The systems within this network are not critical systems and recent backups have been created and tested, so any damage you might cause is of little concern. The organization has had multiple system administrators manage the network over the last couple of years, and they are unsure of the competency previous (or current) staff2

Configuration

PenTest Lab Disk 2.100: This LiveCD is configured with an IP address of 192.168.2.100 - no additional configuration is necessary.

Pentest Machine:

Your second system will use the BackTrack (v.2) LiveCD as provided by remote-exploit.org. A copy of the LiveCD can be downloaded from remote-exploit.org. This disk is configured to obtain an IP address through DHCP - thus no additional configuration is required. All tools necessary to exploit Disk 2.100 can be found on the BackTrack Disk. No additional installations will be necessary.

Router Configuration:

The PenTest Lab system and the PenTest machine must connect to a router that has been configured with the following values:

• DHCP Server: active
• Pool Starting Addr.: 192.168.2.2

LAN TCP/IP: + IP Address: 192.168.2.1 + IP Subnet Mask: 255.255.255.0

Source: http://forums.hackingdojo.com/viewtopic.php?f=18&t=91

DOWNLOAD :: (Size: 254 MB)

OWASP Broken Web Applications Project

The Broken Web Applications (BWA) Project produces a Virtual Machine running a variety of applications with known vulnerabilities for those interested in:

• learning about web application security
• testing manual assessment techniques
• testing automated tools
• testing source code analysis tools
• observing web attacks
• testing WAFs and similar code technologies

all the while saving people interested in doing either learning or testing the pain of having to compile, configure, and catalog all of the things normally involved in doing this process from scratch.

DOWNLOAD

Vulnix (Vulnerable Linux) Release 1.0

Here we have a vulnerable Linux host with configuration weaknesses rather than purposely vulnerable software versions (well at the time of release anyway!)


The host is based upon Ubuntu Server 12.04 and is fully patched as of early September 2012. The details are as follows:

• Architecture: x86
• Format: VMware (vmx & vmdk) compatibility with version 4 onwards
• RAM: 512MB
• Network: NAT
• Extracted size: 820MB
• Compressed (download size): 194MB – 7zip format – 7zip can be obtained from here
• MD5 Hash of Vulnix.7z: 0bf19d11836f72d22f30bf52cd585757

DOWNLOAD 

Hackxor 1

About hacxkor
Hackxor is a webapp hacking game where players must locate and exploit vulnerabilities to progress through the story. Think WebGoat but with a plot and a focus on realism&difficulty. Contains XSS, CSRF, SQLi, ReDoS, DOR, command injection, etc

Features:

• Client attack simulation using HtmlUnit; no alert('xss') here.
• Smooth difficulty gradient from moderately easy to fiendishly tricky.
• Realistic vulnerabilities modelled from Google, Mozilla, etc (No rot13!)
• Open ended play; progress by any means possible.

Play the online demo
The first two levels can be played online here. Since this is kindly being hosted by SourceForge, there are a couple of common sense rules:

• No automated scanners or bruteforce tools (nmap, BURP scanner, skipfish, etc)
• Only exploit http://hackxor.sourceforge.net/* (Other sites on the same IP are not fair game)

Start at wraithmail and login with algo:smurf
If you just want an SQLi challenge, see if you extract usernames&passwords from the second level

Download&install instructions

• Download the full version of hackxor (700mb)
• Install VMWare Player (This involves creating a free account with vmware)
• Extract hackxor1.7z, run the image using VMware player.
• Work out what the IP of hackxor is ((try 172.16.93.129)|| logging into the VM with username:root pass:hackxor and typing ifconfig)
• Configure your hosts file (/etc/hosts on linux) to redirect the following domains to the IP of hackxor: wraithmail, wraithbox, cloaknet, GGHB, hub71, utrack.
• Browse to http://wraithmail:8080 and login with username:algo password:smurf

If you can't edit the hosts file for some reason, you could use the 'Override hostname resolution' option in Burp proxy
Troubleshooting the installation:

• If http://wraithmail:8080 loads everything is probably working.
• First: Try 'nmap wraithmail' in a shell to see if port 8080 is open. If it is open, contact me! Otherwise:
• Second: Try nmap <theipofhackxor>. If that succeeds, fix your hosts file. Otherwise:
• Third: If you really can't get any network contact with the VM, check the VM settings in the VM manager
• (this does not involve logging into the virtual machine). Make sure it is set to NAT. If that doesn't fix it:
• Fourth: Try changing the VM network setting to 'Bridged'. This will mean other people on the LAN can access it.
• Fifth: If all else fails, contact me on twitter.

The scene
You play a professional blackhat hacker hired to track down another hacker by any means possible. Start by checking your email on wraithmail, and see how far down the rabbit hole you can get. The key websites in this game are http://wraithmail:8080 http://cloaknet:8080 http://gghb:8080 and http://hub71:8080 so if you don't feel like tracking down your target you may hack them in any order. Each website will be properly introduced through the plot.

Hackxor Full Version

GameOver.0.1.null

About GameOver: Project GameOver was started with the objective of training and educating newbies about the basics of web security and educate them about the common web attacks and help them understand how they work. GameOver has been broken down into two sections. Section 1 consists of special web applications that are designed especially to teach the basics of Web Security. This seciton will cover XSS CSRF RFI & LFI BruteForce Authentication Directory/Path traversal Command execution SQL injection Section 2 is a collection of dileberately insecure Web applications. This section provides a legal platform to test your skills and to try and exploit the vulnerabilities and sharpen your skills before you pentest live sites. We would advice newbies to try and exploit these web applications. These applications provide real life environments and will boost their confidence. System Requirements : In order to run the VM image, you need to have a VM Player 4.0.2 or higher.(We have not tested it in lower versions of VM Player). You may allocate 256MB or higher RAM to this instance. In case you do not have a VM Player installed or for some reason you prefer another virtualization software, you may download the .iso and run it in a 'Live' mode. Getting Started : In case you have chosen the Live CD, select 'Live' from the grub menu and Enter Login with the following credentials. username: root password: gameover Once you login, type 'ifconfig' in your GameOver machine command prompt and hit Enter. This will give you the ip address of the GameOver machine (Server). Now in your client browser enter this IP address and hit Enter. You should be able to access GameOver now. Credits: Voyage Linu: GameOver has Voyage Linux as its base OS. Voyage is a minimilistic Linux distribution which is in turn based on Debian. For more information regarding Voyage Linux we encourage you to check out their website: http://linux.voyage.hk/. Web Applications (section 1): 1. Damn Vulneable Web Application: (http://www.dvwa.co.uk/) 2. OWASP WebGoat:(https://www.owasp.org/index.php/Category:OWASP_WebGoat_Project) 3. Ghost (http://www.gh0s7.net/) 4. Mutillidae (http://www.irongeek.com/i.php?page=mutillidae/mutillidae-deliberately-vulnerable-php-owasp-top-10) 5. Zap-Wave: (http://code.google.com/p/zaproxy/) Web Applications (section 2): 1. Owasp Hacademic Challenges : (https://www.owasp.org/index.php/OWASP_Hackademic_Challenges_Project) 2. Owasp Vicnum: (https://www.owasp.org/index.php/Category:OWASP_Vicnum_Project) 3. WackoPicko: (http://www.aldeid.com/wiki/WackoPicko) 4. Owasp Insecure Web App: (https://www.owasp.org/index.php/Category:OWASP_Insecure_Web_App_Project) 5. BodgeIT: (http://code.google.com/p/bodgeit/) 6. PuzzleMall: (https://code.google.com/p/puzzlemall/) 7. WAVSEP: (https://code.google.com/p/wavsep/) Known Bugs :( The .iso cannot be installed on a Virtual machine, but works perfectly in the 'Live mode'. Bug Report: In case you encounter any bug or issue in this Project, you may report it to j0k3r@null.co.in (Jovin Lobo). Conclusion: We encourage users to tryout GameOver and learn more about Web security. There are tons of other deliberately insecure applications on the Internet. If you find any such interesting/useful application we would be glad to append it to this existing collection of insecure Apps. You can send your suggestions/improvements to j0k3r@null.co.in (Jovin Lobo). Road Map: We have currently only included Web based applications in this current release of GameOver. In the future releases we plan to include system level CTF's along with Web based applications to give the users a complete hands-on experience. NULLCON CHALLENGES: You can also visit this link http://www.nullcon.net/challenge/archives.asp to play NULLCON challenges. The challenges are broadly categorized into Web , Cryptography, Trivia, Log, analysis, Reverse engineering, Forensics, System and Programming.

GameOver Readme PDF

DOWNLOAD :: (Size: 407 MB)

21LTR Scene 1

Your pentesting company has been hired to perform a test on a client company's internal network. Your team has scanned the network and you have been assigned one of the discovered systems. Perform a test on this system starting from the beginning of your chosen methodology and submit your report to the project manager at scenes@21LTR.com

Scope Statement

The client has defined a set of limitations for the pentest:

 - All tests will be restricted to the systems identified on the 192.168.2.0/24 network.
 - All commands run against the network and systems must be supplied in the form of script files packaged with the submission of the report
 - A final report indicating all identified vulnerabilities and exploits will be provided to the company's engineering department within 90 days of the start of this engagement. 

Configuration

Scenario Pentest Lab Scene 1:

This LiveCD is configured with an IP address of 192.168.2.120 - no additional configuration is necessary.

MD5: c57d2b39cdf1216300d078eed88f24cb 21LTR.com_Scene1_2.120_v1.0.iso

Download :: 232 mb

KIOPTRIX VM's

Kioptrix level 1 :: 191 MB
Kioptrix Level 1.1 :: 415 MB
Kioptrix Level 1.2 :: 452 MB
Kioptrix Level 1.3 :: 213 MB

Kioptrix VM Level 1.2 challenge

Kioptrix VM Level 1.2 challenge.
452 MB
MD5 Hash : d324ffadd8e3efc1f96447eec51901f2

KIOPTRIX 3

METASPLOITABLE 2

This is Metasploitable2 (Linux)

etasploitable is an intentionally vulnerable Linux virtual machine. This VM can be used to conduct security training, test security tools, and practice common penetration testing techniques.

The default login and password is msfadmin:msfadmin. Never expose this VM to an untrusted network (use NAT or Host-only mode if you have any questions what that means).

To contact the developers, please send email to msfdev@metasploit.com For more information please see the following URL:

- https://community.rapid7.com/docs/DOC-1875

README.TXT

METASPLOITABLE 2 ZIP