RE: Good benchmark application for web security testing tools?

["Lodin, Steven" <steven.lodin () roche com>]

Another option is WebMaven (also known as Buggy Bank).  I saw parts of
this demonstrated by David Rhoades last week out at IT Security
World/HealthSec2005.

http://webmaven.mavensecurity.com/


> hackmebank Or hackmebooks from foundstone?
>
> > Initially I was thinking of Webgoat, 



Steve