Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
Do I just attack those sites while they're live, or is there a way to download the site to attack offline? The reason I'm curious is because if those sites are vulnerable and being used for practice all the time, wouldn't multiple hackers interfere with one another?
What I've seen in the various learning resources I've been to is just, "go practice on these sites", but no explanation as to the process by which you do that.
The answer to this generally depends on the tool. There are some practice targets that can be deployed and attacked locally and there are some that are hosted in the cloud. By and large, these tools aren’t exactly giving a sterile environment (especially the cloud-based ones). This is actually a good thing, as targets in the wild aren’t sterile either. A lot of systems and applications can be assumed to be attacked by multiple agents at once all time anyway, so practicing with that sort of environment is all part of the training.
