http://www.vulnweb.com/
上面有针对asp、php、aspx等的sql注入漏洞等测试
感兴趣的朋友，可以用这个来实际练习一下。
# Awesome Vulnerable Web Applications
|Name |URL |Technology |Creds (role:user:password)|
|-------------------------------|-----------------------------------------|---------------------------------------|--------------------------|
|Acunetix Acuforum |http://testasp.vulnweb.com/ |IIS, ASP, Microsoft SQL Server |unknown
|Acunetix Acublog |http://testaspnet.vulnweb.com/ |IIS, ASP.NET, Microsoft SQL Server |unknown
|Acunetix SecurityTweets |http://testhtml5.vulnweb.com/ |nginx, Python, Flask, CouchDB |admin:admin:1234
|Acunetix Acuart |http://testphp.vulnweb.com/ |Apache, PHP, MySQL |unknown
|Cenzic crackmebank |http://crackme.cenzic.com/ |CentOS, Apache, PHP |unknown
|HP freebank |http://zero.webappsecurity.com/ |Apache Tomcat |unknown
|IBM altoromutual |http://demo.testfire.net/ |ISS, ASP.NET |unknown
|Testsparker ASP.NET |http://aspnet.testsparker.com/ |ISS, ASP.NET |unknown
|Testsparker PHP |http://php.testsparker.com/ |Apache, PHP |unknown
|NTOSpider Test Site |http://www.webscantest.com/ |Apache, PHP |unknown
|HackYourselfFirst |http://hackyourselffirst.troyhunt.com/ |IIS, ASP.NET |unknown
|NotASafaWeb |http://notasafaweb.apphb.com/ |IIS, ASP.NET |unknown
|Hackazon |http://hackazon.webscantest.com/ |Apache, PHP, Ajax, JSONm XML, Gwt, AMF |unknown
|Firing Range |https://public-firing-range.appspot.com/ |Google App Engine |unknown
|OWASP Vicnum |http://vicnum.ciphertechs.com/ |Apache, PHP, Perl |unknown
|Google Gruyere |http://google-gruyere.appspot.com/start |Python, Google App Engine |unknown
|Web Application Vulnerable Lab |http://wav-lab.com/ |IIS, ASP.NET |unknown
|OWASP NodeGoat |http://nodegoat.herokuapp.com/ |Node.js |unknown
|OWASP Juice Shop |https://juice-shop.herokuapp.com/ |Node.js |unknown
|Cyclone Transfers |http://cyclone.ciphertechs.com/ |Ruby on Rails |unknown
|Web Scanner Test Site |http://webscantest.com/ |Apache, PHP |unknown