, it's often difficult to find a hands-on environment to interact with and fully exploit these vulnerabilities Well, Google had a good introduction on web expl

, it's often difficult to find a hands-on environment to interact with and fully exploit these vulnerabilities Well, Google had a good introduction on web exploits, with a sandboxed environment for you to try it: http://google-gruyere.appspot.com/ http://google-gruyere.appspot.com/ A bit older, but good nonetheless: Hack this site[1] [1] http://www.hackthissite.org/ http://www.hackthissite.org/