BTS PenTesting Lab - Vulnerable Web Application For Practicing Penetration Testing

BTS PenTesting Lab is an open source vulnerable web application that can be used to learn about different types of web application vulnerabilities.

Currently, the app contains the following types of vulnerabilities:

• Cross-Site Request Forgery (CSRF)
• Clickjacking
• Code Execution
• File Inclusion
• Insecure Direct Object Reference
• Open URL Redirection
• SQL Injection
• Server Side Request Forgery (SSRF)
• Server Side Includes (SSI) Injection
• Unrestricted File Upload vulnerability
• XSS(includes Flash Based XSS)

Download BTS PenTesting Lab

BTS PenTesting Lab (GitHub)

You might also like:

• GoatDroid - Self-Contained Android Pentesting Environment

• ike-scan - Tool For Discovering, Fingerprinting, & Testing IPsec VPN Systems

• Wapiti - Web Application Vulnerability Scanner

• Wireless Attack Toolkit - A Push-button Wireless Hacking & Man-In-The-Middle Attack Toolkit

• SQL Injection Test Environment - A Collection Of Web Pages Vulnerable To SQL Injection

• MKBRUTUS - A Password Bruteforcer For MikroTik Devices or Boxes Running RouterOS

• NoSQLMap - Automated Mongo Database & NoSQL Web Application Exploitation Tool

• Blue|Smash - A Bluetooth Pentest Suite

• Harald Scan - A Bluetooth Scanner for Linux and Mac OS X

• CSRFTester - Cross-Site Request Forgery Vulnerability Tester

• ModSecurity - An Open Source Web Application Firewall Engine

• PDFMiner - Python PDF Parser and Analyzer

• aidSQL - SQL Injection Detection Tool

• LANs.py - Tool For Injecting codes, Jamming WiFi, & Spying on WiFi Users

• WebSurgery - Web Application Security Testing Suite

• Beleth - Multi-threaded SSH Password Auditor

• pyClamd - Using Clamav with Python

• FuzzDB - Comprehensive Set Of Known Attack Sequences

• SecLists - The Pentesters Companion

• Cansina - Web Content Discovery Tool

from Effect Hacking full article here