Which vulnerable OS's like for example DVL would you recommend for someone to use for the purpose of pentest/exploitation learning?
There's a couple of good ones in addition to DVL, that I've come across
- Metasploitable is designed for testing out some of Metasploits functionality. There's some good information on using it in the free Metasploit Unleashed course.
- There's also DVWA from a web applications perspective
Another good list I came across on a blog recently, has quite a few potential vulnerable apps
There is quite a lot of them:
- Metasploitable: Currently there are 2 versions.
- Kioptrix: Currently 4 challenges.
- Hackademic: Apparently 2 VM, check 1 and 2.
- pWnOS: Currently 2 challenges.
Standalone which you can install directly without VM, this is to hone your Webattack-Fu:
I'd suggest in additiona to HamZa DzCyberDeV's answer:
Pentester Labs exercises which are full VMs as well as full detailed walkthroughs etc. These are great for all skill levels and i've found them most useful.
Another good one is http://exploit-exercises.com/:
exploit-exercises.com provides a variety of virtual machines, documentation and challenges that can be used to learn about a variety of computer security issues such as privilege escalation, vulnerability analysis, exploit development, debugging, reverse engineering, and general cyber security issues.
To a greater or lesser degree, almost all OS'es should be counted as vulnerable out of the box, so in my opinion you should practice on Win XP, 2000 and possibly Win 7, Linux (of any type), MAC OS X etc. Once you understand the vulnerabilities, then patch and apply secure hardening guidance and retest the same platforms. You will then get some valuable experience as to how OS'es can be secured.
Please see Question: servers-for-penetration-testing. It has many Operating Systems and live servers that you are allowed to attack, hack and learn...
If you have a little money to spend then you can grab an MSDN OS license to gain access to the various Windows OS versions. If you answer the questions correctly, you can get an MSDN license for $100 via BizSpark: http://www.microsoft.com/bizspark/Faqs.aspx
UPDATE: Check out this list: http://www.felipemartins.info/2011/05/pentesting-vulnerable-study-frameworks-complete-list/
Hi just on the following of "vulnerable" VM's I have a great resource for you guys just thought id pop it on here. It's called VulnHub.
OWASP site, specifically
Contains links to Virtual machines etc, some maintained others not