Legal hacking websites to practice and learn.
Training your legal hacking cyber skills means also keeping your hacking skills up to date. To do this, you need an environment to practice in, legally and safely. Here is a list of websites you can visit and practice your cyber skills.
| Arizona Cyber Warfare Range | The ranges offer an excellent platform for you to learn computer network attack (CNA), computer network defense (CND), and digital forensics (DF). You can play any of these roles. |
| BodgeIt Store | The BodgeIt Store is a vulnerable web application which is currently aimed at people who are new to pen testing. |
| bWAPP | bWAPP, or a buggy web application, is a free and open source deliberately insecure web application. |
| Commix testbed | A collection of web pages, vulnerable to command injection flaws. |
| CryptOMG | CryptOMG is a configurable CTF style test bed that highlights common flaws in cryptographic implementations. |
| Damn Small Vulnerable Web | Damn Small Vulnerable Web (DSVW) is a deliberately vulnerable web application written in under 100 lines of code, created for educational purposes. It supports the majority of (most popular) web application vulnerabilities together with appropriate attacks. |
| Damn Vulnerable Android App | Damn Vulnerable Android App (DVAA) is an Android application which contains intentional vulnerabilities. |
| Damn Vulnerable iOS App | Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. |
| Damn Vulnerable Linux | Damn Vulnerable Linux (DVL) is everything a good Linux distribution isn’t. Its developers have spent hours stuffing it with broken, ill-configured, outdated, and exploitable software that makes it vulnerable to attacks. |
| Damn Vulnerable Router Firmware | The goal of this project is to simulate a real-world environment to help people learn about other CPU architectures outside of the x86_64 space. This project will also help people get into discovering new things about hardware. |
| Damn Vulnerable Web Services | Damn Vulnerable Web Services is an insecure web application with multiple vulnerable web service components that can be used to learn real-world web service vulnerabilities. |
| Damn Vulnerable Web Sockets | Damn Vulnerable Web Sockets (DVWS) is a vulnerable web application which works on web sockets for client-server communication. |
| Damnvulnerable.me | A deliberately vulnerable modern-day app with lots of DOM-related bugs. |
| DIVA Android | Damn Insecure and vulnerable App for Android. |
| exploit.co.il Vulnerable Web App | exploit.co.il Vulnerable Web app designed as a learning platform to test various SQL injection Techniques. |
| Hack The Box | Hack The Box is an online platform allowing you to test your penetration testing skills and exchange ideas and methodologies with other members of similar interests. In order to join you should solve an entry-level challenge. |
| Hack This Site | More than just another hacker wargames site, Hack This Site is a living, breathing community with many active projects in development, with a vast selection of hacking articles and a huge forum where users can discuss hacking, network security, and just about everything. |
| Hackazon | A modern vulnerable web app. |
| Hackxor | Hackxor is a web app hacking game where players must locate and exploit vulnerabilities to progress through the story. Think WebGoat but with a plot and a focus on realism&difficulty. Contains XSS, CSRF, SQLi, ReDoS, DOR, command injection, etc. |
| Morning Catch | Morning Catch is a VMware virtual machine, similar to Metasploitable, to demonstrate and teach about targeted client-side attacks and post-exploitation. |
| MysteryTwister C3 | MysteryTwister C3 lets you solve crypto challenges, starting from the simple Caesar cipher all the way to modern AES, they have challenges for everyone. |
| Overthewire | The wargames offered by the OverTheWire community can help you to learn and practice security concepts in the form of fun-filled games. |
| SlaveHack | Slavehack is a virtual hack simulation game. Great for starters, I’ve seen kids in elementary school playing this! |
| SQLzoo | Try your Hacking skills against this test system. It takes you through the exploit step-by-step. |
| Vulnhub | An extensive collection of vulnerable VMs with user-created solutions. |
| XSS-game | In this training program, you will learn to find and exploit XSS bugs. You’ll use this knowledge to confuse and infuriate your adversaries by preventing such bugs from happening in your applications. |
Websitecyber related posts:
Board of Water Supply Cyberattacks
Latitude Financial Cyber Hack
The Emergence of New Scams
Align Information Security
Cyber Weapons
The CDK Cyberattack
Desert Tech Ransomware Cyber Attack
Cyber Security InfoWatch
Tailscale VPN
Introducing The New USB Rubber Ducky
MGM and Caesars Hacked
The Internet of Things on AWS