找個靶機練練手
http://sourceforge.net/projects/owaspbwa/
Description
Open Web Application Security Project (OWASP) Broken Web Applications Project, a collection of vulnerable web applications that is distributed on a Virtual Machine in VMware format compatible with their no-cost and commercial VMware products.
OWASP Broken Web Applications Project Web Site 
Categories
Features
OWASP
Virtual Machine
Vulnerable Web Apps