Is it worth a shit to follow SQL injection tutorials here, and other things to experiment on this environment. 😎 I need some direction on "Where to start" I can code HTML, CSS, JS, PHP, and SQL. Now I'm ready to start breaking shit. Are there any useful tips for "finding practice environments" 🤝
Initial Practice on "DVWA" |
DVWA is a good place to start, and most of the challenges have public solutions. SQL is worth learning, to get you going in how to develop injections and how they work with the backend db (you will shortly see a SQLite Injection CVE from me soon, right now it's a zero day that is being patched by a company, more on this during publication).
You can also check https://securityshards.wordpress.com/ for some exclusive hacking challenges and also the usual vulnhub.com to get your feet wet. You will surely grow and learn more as you go along with these challenges, and as you find more unknowns, you will become better at learning the essential things you find missing. My buddy g0tm1lk has some cool Kioptrix challenges that are worth diving into. Overall, it all depends on you. The security field is very vast. During my beginnings, I started with web application attacks, then later moved into client-side exploits, server side exploitation, buffer overflows (and the lot of them), forensics, cryptography, and so on. The web-side of information security was more attractive to me, maybe it can work for you too. Have fun in whatever you do! |
|
|
