rajmohan Posted September 16, 2008 Share Posted September 16, 2008 As i'm a web developer, the biggest problem to me always is to test the website i coded, test its security and how much is it safe. Please let me know how to hack my site. I tried with few of the things such as ' or 1=1 -- in the username area. I am most welcoming the peoples to share the SQL injection as well as how to hack the site to secure more my site. Quote Link to comment Share on other sites More sharing options...
metrostars Posted September 16, 2008 Share Posted September 16, 2008 You could try Acunetix or something similar which basically tries everything possible to hack into the site. Helped me to find a few problems with my security. Quote Link to comment Share on other sites More sharing options...
rajmohan Posted September 16, 2008 Author Share Posted September 16, 2008 Can you please give some Manual options rather then using some third part tool to find it. Quote Link to comment Share on other sites More sharing options...
burnside Posted September 16, 2008 Share Posted September 16, 2008 url would be nice ............. ? also should be posted in beta test my site. Quote Link to comment Share on other sites More sharing options...
ardyandkari Posted September 16, 2008 Share Posted September 16, 2008 if you post in "beta test" forum here you might get tested for free with Acunetix by darkfreaks... that will take care of most of your security issues...if not all. i do suggest posting there. Quote Link to comment Share on other sites More sharing options...
corbin Posted September 16, 2008 Share Posted September 16, 2008 So you want us to teach you how to look for every security hole possible in a site? It's not that simple. There's no magic, "SITE SECURITY TEST" button. (Except for third party software.) Just look for things you can exploit, and see if it works. Quote Link to comment Share on other sites More sharing options...
Daniel0 Posted September 16, 2008 Share Posted September 16, 2008 There's no magic, "SITE SECURITY TEST" button. (Except for third party software.) Script Kiddie Quote Link to comment Share on other sites More sharing options...
The Little Guy Posted September 16, 2008 Share Posted September 16, 2008 Easy as 1... 2... 3... $sql = mysql_query(sprintf("INSERT INTO tableName ('col1','col2','col3') VALUES (`%s`,`%s`,`%s`)", mysql_real_escape_string($_POST['p1']), mysql_real_escape_string($_POST['p2']), mysql_real_escape_string($_POST['p3'])); Hack Free Quote Link to comment Share on other sites More sharing options...
corbin Posted September 17, 2008 Share Posted September 17, 2008 There's no magic, "SITE SECURITY TEST" button. (Except for third party software.) Script Kiddie I NOU SCRIPT KIDDIE. I <3 script kiddies. "Tried my couple scripts.... Nothing worked. Damn. Next site." Quote Link to comment Share on other sites More sharing options...
waynewex Posted September 20, 2008 Share Posted September 20, 2008 i r l33t haxor n i k4n t3l y0u a|| ab0ut hax 'OR 1 = 1-- d4t wi|| w0rk 0n 90% of w3bsit3s i n0 cuz i r pr0f3ssi0n4l h4x0r Quote Link to comment Share on other sites More sharing options...
DarkWater Posted September 20, 2008 Share Posted September 20, 2008 i r l33t haxor n i k4n t3l y0u a|| ab0ut hax 'OR 1 = 1-- d4t wi|| w0rk 0n 90% of w3bsit3s i n0 cuz i r pr0f3ssi0n4l h4x0r i wish i culd be liek u Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.