How would I check my own site for flaws?

ProfessorChill · 09-06-2016, 03:40 PM

As you guys know I'm not really a hacker, I'm just the music guy Biggrin

But with that said I am making a website for myself and would like to try to break into it, no worries, it is my own website and not anyone elses.
I just want to check for the standard like breaking into MySQL and whatnot.

It's not hosted anywhere right now so I can't really ask for someone to help and give the ip or hostname but if I could be given a tool kit or something? I don't know how this stuff works D:

Thanks for any help Smile

Altair · 09-06-2016, 04:19 PM

You don't need to hosting or domain, just install your script on your localhost. You can use Xampp or WAMP server.

ProfessorChill · 09-06-2016, 04:29 PM

(09-06-2016, 04:19 PM)Altair Wrote: You don't need to hosting or domain, just install your script on your localhost. You can use Xampp or WAMP server.

Hm, that actually does help a large amount since I don't need a host now however do you know of any scripts I should use to test the integrity of my site?

Bish0pQ · 09-06-2016, 06:50 PM

You can always upload it and run tools like OWASP or Acunetix.

ProfessorChill · 09-06-2016, 08:36 PM

(09-06-2016, 06:50 PM)Bish0pQ Wrote: You can always upload it and run tools like OWASP or Acunetix.

Thanks a ton! I'll check those out.
Hopefully it will help me with my site ^_^\

Oni · 09-06-2016, 08:56 PM

Unless you fail to sanitize user input or do something dumb, it shouldn't be possible to breach. If you want to shoot me details I might be willing to take a quick glance or forward it to someone that can.

Spoiler:It's nice to see you're still alive. Ever considered playing music on the plug.dj?

Bish0pQ · 09-06-2016, 09:57 PM

(09-06-2016, 08:36 PM)ProfessorChill Wrote:
(09-06-2016, 06:50 PM)Bish0pQ Wrote: You can always upload it and run tools like OWASP or Acunetix.

Thanks a ton! I'll check those out.
Hopefully it will help me with my site ^_^\

If you want to I can run some tests if you get your site up. I'll send you the full report.

mothered · 09-09-2016, 03:33 PM

(09-06-2016, 09:57 PM)Bish0pQ Wrote: If you want to I can run some tests if you get your site up. I'll send you the full report.

@ProfessorChill, you're In good hands here with @Bish0pQ.

In addition to this, I can also test It once It's online via manual Intervention rather than automated tools. I can also have a look at all front-end security configurations and Implementations, Identify what's susceptible to exploitation and recommend how to protect and fend off attacks thereafter.

Bish0pQ · 09-09-2016, 03:58 PM

(09-09-2016, 03:33 PM)mothered Wrote:
(09-06-2016, 09:57 PM)Bish0pQ Wrote: If you want to I can run some tests if you get your site up. I'll send you the full report.

@ProfessorChill, you're In good hands here with @Bish0pQ.

In addition to this, I can also test It once It's online via manual Intervention rather than automated tools. I can also have a look at all front-end security configurations and Implementations, Identify what's susceptible to exploitation and recommend how to protect and fend off attacks thereafter.

Sure that would be great, that would defintly be a very nice and generous addition. I'll send you the same report if @ProfessorChill is okay with it.

In that way we won't do the same things twice. You can always correct my report when I'm done, I would even appreciate it actually.

mothered · 09-09-2016, 04:08 PM

(09-09-2016, 03:58 PM)Bish0pQ Wrote: Sure that would be great, that would defintly be a very nice and generous addition. I'll send you the same report if @ProfessorChill is okay with it.

In that way we won't do the same things twice. You can always correct my report when I'm done, I would even appreciate it actually.

No problem at all my friend.

We can exchange, alter and update details Into one consolidated report. I may neglect (or overlook) details here and there and vice versa, hence two heads are better than one.