Mutt
Professional
- Messages
- 1,167
- Reaction score
- 835
- Points
- 113
Web Security Dojo is a free, self-contained open source framework for security training and penetration testing of web applications.
Homepage: https://www.mavensecurity.com/resources/web-security-dojo/
Installing Web Security Dojo
You must have VirtualBox installed.
Then download the container with Web Security Dojo.
When the download is complete, double click on the downloaded file and import the virtual machine settings into VirtualBox.
After finishing importing the settings, a new one will appear in the list of virtual machines, start it as a normal virtual machine.
Default user credentials dojo: dojo
Pentesting software in the Web Security Dojo
The following programs are present:
Homepage: https://www.mavensecurity.com/resources/web-security-dojo/
Installing Web Security Dojo
You must have VirtualBox installed.
Then download the container with Web Security Dojo.
When the download is complete, double click on the downloaded file and import the virtual machine settings into VirtualBox.
After finishing importing the settings, a new one will appear in the list of virtual machines, start it as a normal virtual machine.
Default user credentials dojo: dojo
Pentesting software in the Web Security Dojo
The following programs are present:
- Burp Suite (free version)
- w3af
- sqlmap
- arachni
- metasploit
- Zed attack proxy
- OWASP Skavenger
- OWASP Dirbuster
- Paros
- Webscarab
- Ratproxy
- skipfish
- websecurify
- davtest
- J-Baah
- JBroFuzz
- Watobo
- RATS
- Useful Firefox plugins