Сейчас ищут
Portswigger. Смотреть видео: What Is SQL Injection Web Security Academy, Testing For SQL Injection Vulnerabilities With Burp Suite, Testing For Reflected XSS Manually With Burp Suite, Portswigger Access Control Lab 1 Unprotected Admin Functionality.