Set up Your own Hacking Lab

There is a open source project Damn Vulnerable Web App (DVWA).Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and aid teachers/students to teach/learn web application security in a class room environment. Now you need an XAMPP server to install this application.

Insatlling XAMPP Server

=> Download the XAMPP server
Download
=> Locate the installed folder and go to htdocs.

=> Now extract the contents of downloaded file to htdocs folder.
=> Open any browser and type localhost/foldername

Set up DVWA:

A log in screen will appear.

Log in with username as "admin" and password as "password".

After that you will be greeted with its home page

Now you know what to do-Hack.Select the security level,try different attacks.It offers the following attacks:-
* Brute Force
* Command Execution
* CSRF
* Insecure Captcha
* File Inclusion
* Sql Injection
* Blind SQL Injection
* XSS Stored
* XSS Reflected