PHP / LFI - OSCE Study

Any recommended boxes for covering PHP, LFI, XSS to RCE?
I’m just after getting some more experience in this area to help with the OSCE.

Thanks for any input.

When I did the OSCE the example given for XSS was Merak Mail Server. Not sure if this is still the case. If not, give that a go. I also did SLAE32 which I found helped with the ASM element.

Good Luck

What exactly is OSCE? If you are looking for a PHP/LFI Box go Waldo.

OSCE is an Offensive Security course.