Re: [WEB SECURITY] RE: Environment for testing WebApp Security Scanners

["Martin Johns" <martin.johns@xxxxxxxxx>]

------=_Part_101750_3153695.1156419469217
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hi,

For security testing environment there is Stanford Securibench, which is a
> set of open source real-life programs to be used as a testing ground for
> static and dynamic security tools. Release .91a focuses on Web-based
> applications written in Java.
> http://suif.stanford.edu/~livshits/securibench/
>

Does anybody here know about a comparable project that collects vulnerable
php-code? (and don't dare to answer "sourceforge.net")

-- Martin

------=_Part_101750_3153695.1156419469217
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hi,<br><div><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">For security testing environment there is Stanford Securibench, which is a<br>
set of open source real-life programs to be used as a testing ground for<br>static and dynamic security tools. Release .91a focuses on Web-based<br>applications written in Java.<br><a href="http://suif.stanford.edu/~livshits/securibench/";>
http://suif.stanford.edu/~livshits/securibench/</a><br></blockquote></div><br>Does anybody here know about a comparable project that collects vulnerable php-code? (and don't dare to answer &quot;<a href="http://sourceforge.net";>
sourceforge.net</a>&quot;)<br><br>-- Martin<br>

------=_Part_101750_3153695.1156419469217--