I was curious if there is any need to secure/protect ourselves when doing projects on sites like OWASP to learn about vulnerabilities or "Wargames/Challenges" such as what's posted in these links
It seems that these sites are created for legal purposes, with the intent of learning. I'm curious if that is also a concern for malicious users altering these projects that could hurt others, or possibly some of these not being all that protected...?
I'm curious if people would recommend being in a VM/test machine (would you always want to use a VM, over a physical machine, just in case of hardware malware, or w/e?), as well as VPN/Proxy for privacy, etc?
Just curious if any of this is needed, or if most of these sites are legit...
Maybe it's just good practice in general to always protect yourself from sites you don't know about (i.e., block JS, cookies, plugins, etc)? I just figured since we are working with vulnerabilities and stuff that could be dangerous, that we should be protected on our end too?