BTS PenTesting Lab - a vulnerable web application to learn common vulnerabilities

The most common question from students who is
learning website hacking techniques is "how to test
my skills legally without getting into troubles?".
Here is solution for you guys, you can learn web
application Pentesting with our New app "BTS
Pentesting Lab".
BTS PenTesting Lab is a vulnerable web application
that allows you to learn from basic to advanced
vulnerability techniques.
Currently, the app contains following vulnerability
types:
SQL Injection
Cross Site scripting(XSS)
Cross Site request Forgery(CSRF)
Clickjacking
Server Side Request Forgery
(SSRF))
File Inclusion(RFI and LFI)
Remote Code Execution
Download the latest version of BTS Lab
https://sourceforge.net/projects/btslab/files/
latest/download
How to run BTS PenTesting Lab?
1. Install XAMPP or WAMPP in your machine
2. Extract the zip file into the htdocs folder
(make sure to rename the folder to "btslab").
3. Open the "http://localhost/btslab/setup.php"
url in your browser.
4. Click the Setup.
That's all Now you can start to use the app at
"http://localhost/btslab" :)
In next update, i will add more vulnerability types
and advanced techniques. My next articles will be
based on this app :)