AW: web application scanning tool - any unsecure demo sites out t here to run them against?

[Martin Muench <mmuench () it-sec de>]

Maybe you should check this out:
http://www.owasp.org/index.php/Owasp_SiteGenerator

> From the description:

--snipp--
OWASP SiteGenerator allows the creating of dynamic websites based on XML
files and predefined vulnerabilities (some simple, some complex) covering
.Net languages and web development architectures (for example, navigation:
Html, Javascript, Flash, Java, etc...).
--snapp--

I never tried it out so if you do please let us know if you liked it...

Regards


-----Ursprüngliche Nachricht-----
Von: bigbert007 [mailto:bigbert007 () gmail com] 
Gesendet: Dienstag, 18. März 2008 14:18
An: webappsec () securityfocus com
Betreff: web application scanning tool - any unsecure demo sites out there
to run them against?

Hi everyone,

I'm working on a project that involves evaluation web app scanning 
tools.  I'm looking to run each of the scanning tools against  the 
following app types:

1.  J2EE
2.  ASP.Net
3.  PHP
4.  ColdFusion

I know that WebGoat is out there on the OWASP site for testing/learning 
purposes, but I am coming up empty handed for the the other app types.  
Does anyone have any suggestions for "ready-made" sites like the above 
that I could get my hands on?

Thanks!

Bert


---
avast! Antivirus: Outbound message clean.
Virus Database (VPS): 080318-0, 03/18/2008
Tested on: 3/18/2008 10:02:48 AM
avast! - copyright (c) 1988-2008 ALWIL Software.
http://www.avast.com




-------------------------------------------------------------------------
Sponsored by: Watchfire 
Methodologies & Tools for Web Application Security Assessment 
With the rapid rise in the number and types of security threats, web
application security assessments should be considered a crucial phase in the
development of any web application. What methodology should be followed?
What tools can accelerate the assessment process? Download this Whitepaper
today! 

https://www.watchfire.com/securearea/whitepapers.aspx?id=70170000000940F
-------------------------------------------------------------------------

-------------------------------------------------------------------------
Sponsored by: Watchfire
Methodologies & Tools for Web Application Security Assessment
With the rapid rise in the number and types of security threats, web application security assessments should be 
considered a crucial phase in the development of any web application. What methodology should be followed? What tools 
can accelerate the assessment process? Download this Whitepaper today!

https://www.watchfire.com/securearea/whitepapers.aspx?id=70170000000940F
-------------------------------------------------------------------------