+- Sinisterly (https://sinister.ly)
+-- Forum: General (https://sinister.ly/Forum-General)
+--- Forum: The Lounge (https://sinister.ly/Forum-The-Lounge)
+---- Forum: Serious Discussion (https://sinister.ly/Forum-Serious-Discussion)
+---- Thread: How would I check my own site for flaws? (/Thread-How-would-I-check-my-own-site-for-flaws)
How would I check my own site for flaws? - ProfessorChill - 09-06-2016
As you guys know I'm not really a hacker, I'm just the music guy
But with that said I am making a website for myself and would like to try to break into it, no worries, it is my own website and not anyone elses.
I just want to check for the standard like breaking into MySQL and whatnot.
It's not hosted anywhere right now so I can't really ask for someone to help and give the ip or hostname but if I could be given a tool kit or something? I don't know how this stuff works D:
Thanks for any help
RE: How would I check my own site for flaws? - Altair - 09-06-2016
You don't need to hosting or domain, just install your script on your localhost. You can use Xampp or WAMP server.
RE: How would I check my own site for flaws? - ProfessorChill - 09-06-2016
(09-06-2016, 04:19 PM)Altair Wrote: You don't need to hosting or domain, just install your script on your localhost. You can use Xampp or WAMP server.
Hm, that actually does help a large amount since I don't need a host now however do you know of any scripts I should use to test the integrity of my site?
RE: How would I check my own site for flaws? - Bish0pQ - 09-06-2016
You can always upload it and run tools like OWASP or Acunetix.
RE: How would I check my own site for flaws? - ProfessorChill - 09-06-2016
(09-06-2016, 06:50 PM)Bish0pQ Wrote: You can always upload it and run tools like OWASP or Acunetix.
Thanks a ton! I'll check those out.
Hopefully it will help me with my site ^_^\
RE: How would I check my own site for flaws? - Oni - 09-06-2016
Unless you fail to sanitize user input or do something dumb, it shouldn't be possible to breach. If you want to shoot me details I might be willing to take a quick glance or forward it to someone that can.
Spoiler:
It's nice to see you're still alive. Ever considered playing music on the plug.dj?
RE: How would I check my own site for flaws? - Bish0pQ - 09-06-2016
(09-06-2016, 08:36 PM)ProfessorChill Wrote:(09-06-2016, 06:50 PM)Bish0pQ Wrote: You can always upload it and run tools like OWASP or Acunetix.
Thanks a ton! I'll check those out.
Hopefully it will help me with my site ^_^\
If you want to I can run some tests if you get your site up. I'll send you the full report.
RE: How would I check my own site for flaws? - mothered - 09-09-2016
(09-06-2016, 09:57 PM)Bish0pQ Wrote: If you want to I can run some tests if you get your site up. I'll send you the full report.
@ProfessorChill, you're In good hands here with @Bish0pQ.
In addition to this, I can also test It once It's online via manual Intervention rather than automated tools. I can also have a look at all front-end security configurations and Implementations, Identify what's susceptible to exploitation and recommend how to protect and fend off attacks thereafter.
RE: How would I check my own site for flaws? - Bish0pQ - 09-09-2016
(09-09-2016, 03:33 PM)mothered Wrote:(09-06-2016, 09:57 PM)Bish0pQ Wrote: If you want to I can run some tests if you get your site up. I'll send you the full report.
@ProfessorChill, you're In good hands here with @Bish0pQ.
In addition to this, I can also test It once It's online via manual Intervention rather than automated tools. I can also have a look at all front-end security configurations and Implementations, Identify what's susceptible to exploitation and recommend how to protect and fend off attacks thereafter.
Sure that would be great, that would defintly be a very nice and generous addition. I'll send you the same report if @ProfessorChill is okay with it.
In that way we won't do the same things twice. You can always correct my report when I'm done, I would even appreciate it actually.
RE: How would I check my own site for flaws? - mothered - 09-09-2016
(09-09-2016, 03:58 PM)Bish0pQ Wrote: Sure that would be great, that would defintly be a very nice and generous addition. I'll send you the same report if @ProfessorChill is okay with it.
In that way we won't do the same things twice. You can always correct my report when I'm done, I would even appreciate it actually.
No problem at all my friend.
We can exchange, alter and update details Into one consolidated report. I may neglect (or overlook) details here and there and vice versa, hence two heads are better than one.