Dummy sites to practise SQL injection?

[andyandy]

Hiya

Inspired by a comment on JREF I was reading up on various methods of accessing data from websites, and being a bit of a maths geek I would quite enjoy playing around with this. However, I'm only interested in the challenge of doing it - not in actually the data itself - and as a result I don't really want to mess around on real sites - firstly because I doubt it's especially legal, nor is it exactly a nice thing to do....

so, are there any dummy internet sites out there - ones that have been set up specifically for people to practise accessing data from (with specific techniques...?) if so, where are they, and if not, why not?

cheers :)

[Maus]

www.hackthissite.org is fun to play on. Also, you can get a VM image called badstore that you can run and hack to your heart's content.

[TheL8Elvis]

Here is a link to a list of them:

http://www.irongeek.com/i.php?page=security/deliberately-insecure-web-applications-for-learning-web-app-security

What suits you depends on if you just want a VM image, or to set things up, or what platform etc.

Have fun :-)

[andyandy]

nice one....cheers :)