challengings

http://blog.spiderlabs.com/2011/07/modsecurity-sql-injection-challenge-lessons-learned.html

and

https://www.owasp.org/index.php/Phoenix/Tools