Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 4 down vote favorite
3

This semester, I have taken a course on Information Security and my project for this course is to implement an SQL injection to obtain admin privileges. For this I first download Havij software (Advanced SQL Injection Tool) to study how it works.

After some time and tests, I know how to hack some of the information of a website. Now, I want to create my own page of the same kind as I found in the example of Havij software at http://www.target.com/index.asp?id=123. How can I make my own page to study penetration testing and hacking of my own information so that I can learn more from it?

share|improve this question
I have a great response and I am glad to know more information about my question. – Salman Nov 17 '12 at 22:25
1  
Downvoter: What's wrong with this question? Asking how to setup a testing environment for yourself to learn from seems like a totally legit question to me. – Luc Nov 18 '12 at 2:07
I am a student and still learning many things from others. – Salman Nov 18 '12 at 3:30

closed as too localized by Rook, Lucas Kauffman, Terry Chia, Scott Pack, Polynomial Nov 18 '12 at 15:54

This question is unlikely to help any future visitors; it is only relevant to a small geographic area, a specific moment in time, or an extraordinarily narrow situation that is not generally applicable to the worldwide audience of the internet. For help making this question more broadly applicable, see the FAQ.

3 Answers

up vote 4 down vote accepted

https://www.pentesterlab.com/from_sqli_to_shell.html - this will walk you through manual exploitation of sql injection, download the vm and follow the step by step pdf.

there is a difference in understanding and doing. this will help :)

share|improve this answer
Thanks for your link and comment. – Salman Nov 17 '12 at 21:54
Welcome to IT Security! Whilst this may theoretically answer the question, it would be preferable to include the essential parts of the answer here, and provide the link for reference. – Scott Pack Nov 18 '12 at 5:05
I appreciate your informative link. – Salman Nov 18 '12 at 6:53
up vote 3 down vote

This website is really useful if you need information on SQL injections : http://www.websec.ca/kb/sql_injection

share|improve this answer
Thanks for your link. – Salman Nov 17 '12 at 22:16
You can find lists of vulnerable applications here and here‌​. – Techbrunch Nov 17 '12 at 22:20
So that means these websites are the lists of vulnerable applications... good informative websites. – Salman Nov 17 '12 at 22:23
up vote 1 down vote

Why make your own? Why not use webgoat or mutillidae? There are many such pre-made targets for you to learn from.

share|improve this answer
Yes, that's also a good practice and it will save my time. I appreciate your links. – Salman Nov 17 '12 at 21:59

Not the answer you're looking for? Browse other questions tagged or ask your own question.