This semester, I have taken a course on Information Security and my project for this course is to implement an SQL injection to obtain admin privileges. For this I first download Havij software (Advanced SQL Injection Tool) to study how it works.

After some time and tests, I know how to hack some of the information of a website. Now, I want to create my own page of the same kind as I found in the example of Havij software at http://www.target.com/index.asp?id=123. How can I make my own page to study penetration testing and hacking of my own information so that I can learn more from it?

closed as too localized by rook, Lucas Kauffman, Ayrx, Scott Pack, Polynomial Nov 18 '12 at 15:54

This question is unlikely to help any future visitors; it is only relevant to a small geographic area, a specific moment in time, or an extraordinarily narrow situation that is not generally applicable to the worldwide audience of the internet. For help making this question more broadly applicable, visit the help center. If this question can be reworded to fit the rules in the help center, please edit the question.

  • 1
    Downvoter: What's wrong with this question? Asking how to setup a testing environment for yourself to learn from seems like a totally legit question to me. – Luc Nov 18 '12 at 2:07

From SQL injection to shell - this will walk you through manual exploitation of sql injection, download the vm and follow the step by step pdf.

there is a difference in understanding and doing. this will help :)

  • Welcome to IT Security! Whilst this may theoretically answer the question, it would be preferable to include the essential parts of the answer here, and provide the link for reference. – Scott Pack Nov 18 '12 at 5:05

This website is really useful if you need information on SQL injections : http://www.websec.ca/kb/sql_injection

  • You can find lists of vulnerable applications here and here. – Techbrunch Nov 17 '12 at 22:20

Why make your own? Why not use webgoat or mutillidae? There are many such pre-made targets for you to learn from.

  • Yes, that's also a good practice and it will save my time. I appreciate your links. – Salman Nov 17 '12 at 21:59

Not the answer you're looking for? Browse other questions tagged or ask your own question.