Acunetix Art

TEST and Demonstration site for Acunetix Web Vulnerability Scanner
WARNING: This is not a real shop. This is an example PHP application which is intentionally vulnerable to web attacks. It is intended to help you test security scanners and practice manual hacking skills.
Tip: Look for potential SQL Injections, Cross-site Scripting (XSS), and Cross-site Request Forgery (CSRF), and more.

PHP Eval Injection (SSTI-style)

Evaluating: system('cat /etc/passwd')

Result:

Error: syntax error, unexpected end of file

Enter PHP code to evaluate:

Examples: