Please Hack My Site

XIII

Sep 2 2006, 01:59 AM

Sorry for the subject, as i will not give you my website link

It is a service i hope to see it soon, though it is so much dangerous but i hope to have it, as i'm a web developer, the biggest problem to me always is to test the website i coded, test its security and how much is it safe, don't tell me try it yourself by trying to hack it, i already know all the passwords

, i need someone or a site which could test that and try to hack it, ofcourse i don't like it to be aggrissive while doing it, it's just a test so i can try to cover any hole or so, as we know some sites includes business information and some important staffs.
if you had ever saw a service like that, i hope you can post it here so we can test our sites, free or paid, i don't care, security is what i care about.

pyost

Sep 2 2006, 08:57 PM

I would be suprised if there weren't at least few web sites on this topic. However, I'm also quite sure that you would have to pay, even for this kind of "service". On the other hand, there also might be sites that test your site's vulnerability by running various scripts.

Now that you've mentioned this, I would like to have something like this, too, so I'll do some googling

I'll tell if I find something

XIII

Sep 3 2006, 09:08 AM

QUOTE(pyost @ Sep 3 2006, 05:57 AM)

Now that you've mentioned this, I would like to have something like this, too, so I'll do some googling

I'll tell if I find something

up till now i didn't find one of these sites, i googled it already, but try may you find it hidden in some place, i will search again and again too, if i find it anywhere else, i will post it here as i finally found another one who interested about the idea

yordan

Sep 4 2006, 11:45 AM

What about this : http://www.auditmypc.com/
at least it's a starting point, I was surprised by some results they found on a computer I thought decently secure.

QUOTE

Firewall Test
Firewall Test - A key to Internet Security begins with a firewall, but when configured wrong, can leave you exposed and vulnerable. Our firewall test performs a port scan to help determine your level of risk. Our port scanner is known for its speed and includes the ability to scan all 65,535 ports

Free Spyware Removal & Privacy Check
Free Spyware Removal - A firewall can be made useless by most spy ware and detecting it can be difficult. Our free spyware removal will help find and remove spy ware that may have made it past your firewall. Internet Privacy - we check for that as well. You may be amazed at the amount of private information you're giving out to strangers!

Free Internet Speed Test
Internet Speed Test - This free Internet Speed Test is extremely accurate, simple to use and results are very easy to understand. Find out if your broadband service provider is really giving you the speed you need.

Web Security Services
Web Security Services - Web security is more than just a firewall! Check out our comprehensive and completely free web security services that will help you detect, remove and audit the software on your system.

XIII

Sep 4 2006, 01:01 PM

QUOTE(yordan @ Sep 4 2006, 08:45 PM)

What about this : http://www.auditmypc.com/
at least it's a starting point, I was surprised by some results they found on a computer I thought decently secure.

It's really a very good site, never heared of it before and guess what?, my PC is free of any kind of these s**ts, i was surprised as i scanned windows installed pc, i feel good with zone alarm security suite.
but this is not the service i wanted, i want a service that can test a web site security not only a pc, and tells if it's secured or not.

yordan

Sep 4 2006, 01:37 PM

OK, would rather look like this : http://www.tele-pro.co.uk/pages/websec.htm

QUOTE

Ecommerce and Website Security Testing
Is your website secure against these common security weaknesses? We offer Website Security Testing which includes tests for these vulnerabilities.

Click on any of the following for more information.

Weak Login Forms
Data Leakage
SQL Injection attacks
Denial of Service
Spam Relaying and Harvesting

Shopping Cart Security
If your website includes a shopping cart or ecommerce facilities, our E-commerce Security Test includes testing for all of the vulnerabilities listed above, and also for Order Manipulation ("eshoplifting") and Admin Control Panel vulnerabilities.

Order Manipulation
Admin Control Panel

Purchase Security Tests
To purchase you must be authorised to perform security analysis on the named website, and give permission for a security analysis to be carried out including the use of automated vulnerability-scanning software.

The website security test will be carried out within 5 working days, and the report will be emailed to you within 7 days.

Standard Website Security Test - £50
Websites without shopping cart or e-commerce

E-commerce Website Security Test - £200
Websites with shopping cart or e-commerce

As you guessed, it's a paying test, they ask at least £200, which is quite a big investment. If they find security holes, this is worth the money. If they find nothing, could mean they are beginners.

foolakadugie

Sep 18 2006, 07:32 AM

QUOTE(XIII @ Sep 1 2006, 06:59 PM)

Sorry for the subject, as i will not give you my website link

http://hackthissite.org/
this site has many simulations of what you might be looking for,
and they also have competitions that do invovle real hacking.

haitamlong

Oct 4 2006, 10:14 AM

How do we suppose to know if you trying to hack into any shop

? U should bbe a good hacker yourself and the best if u hav build your web! ( cos u know the code

)

Alegis

Oct 4 2006, 03:38 PM

Slightly relevant, try2hack.nl was rather fun to do years ago. I got stuck right after the java thing I think. IPB Image

naurus

Nov 10 2006, 04:08 AM

if your site has a login script that uses sql, type in

CODE

1' OR '1'='1

for the password and type a real username for the username. If you get in, youve got issues with sql injection. If so, email me!

Latest Entries

docduke

Jun 17 2008, 05:15 PM

Two suggestions, both of which require some work.

1. Do you have Knoppix? At least as of 5.1.1, Knoppix included Nessus. Do Kicker | KNOPPIX | Utilities, and see if "Nessus Security Scanner" is an option. Caveats: there is a learning curve for using it, and if you uncheck "Safe checks" on the "Scan Options" tab, you'd better have a complete system backup, because it will try destructive penetrations! More information on Nessus is here. There is also a Wikipedia page for it.

2. Shields-Up is a helpful, free way of testing port security. There's a lot there, so it is worth taking some time to explore it.

There are complete custom Linux distributions devoted to analyzing vulnerabilities, but that requires you to dedicate one of your computers to hosting it. (Don't try this in a virtual machine!) They are almost certainly not worth the time it would take you to learn the details of how to use them, unless you plan on making a profession of computer security.

yordan

Jul 17 2007, 07:52 PM

QUOTE(lefioda @ Jul 15 2007, 01:25 AM)

Okay now remove me a doubt...

My friend says to me if u insert a hack comand like:
010101001110010101001110010101001110010101001110010101001110010101001110010101
If you inster this lines on a program like apache, this can crash the server...
Its true?

OK, let's explain something.
What you show here is a liste of alphanimerical lettes, zero's and one's.
this is not a binary file.
A binary file is a compiled file, using a compiler. You cannot compile on a server like astahost.
By the way, even if you were able to submit a binary file, it would not crash the Apache server, it would crash your Microsoft Internet Explorer client. Which is not the only way to crash Internet Explorer, but that's another story.
And, of course, an Apache server works with correctl html files. If you put garbage things in your html page, you will have garbage displayed on your screen. But this cannot crash the Apache server, except in case of severe bugs in the Apache version your server is using.

Chesso

Jul 15 2007, 12:53 AM

Pure Binary Code, somehow I doubt that, unless it's length involved lol.

lefioda

Jul 14 2007, 11:25 PM

Okay now remove me a doubt...

My friend says to me if u insert a hack comand like:

010101001110010101001110010101001110010101001110010101001110010101001110010101
00111001010100111001010100111001010100111001010100111001010100111001010100111
00101010011100101010011100101010011100101010011100101010011100101010011100
10101001110010101001110010101001110010101001110010101001110010101001110010
10100111001010100111001010100111001010100111001010100111001010100111001010100
11100101010011100101010011100101010011100101010011100101010011100101010011100101
01001
11001010100111001010100111001010100111001010100111001010100111001010100111001010
100111
00101010011100101010011100101010011100101010011100101010011100101010011100101010
011
10010101001110

If you inster this lines on a program like apache, this can crash the server...

Its true?

Chesso

Jul 14 2007, 01:27 PM

Well I use something called Accuenitx (or something very similar to that name) Vulnerability web scanner.

Now while I wouldn't really recommend it for testing out on a large website already published, if you have happened to, or decide in the future to build your web sites/applications locally, you could run a full on test and it won't take forever (as it will be 100 times or more quicker on local disk, than accessing and thrashing both yours and the server bandwidth).

ADD REPLY / Got an Opinion!	a humble request :-)	RAPID SEARCH!	Free Hosting	[X]
Express your Opinions, Thoughts or Contribute your information that might help someone here. Ask your Doubts & Queries to get answers.. "Together, We enlight each other!"	Register FREE for AD-FREE forum, Create your own topics, Ask Questions, track topics, setup subscriptions & notifications and Get a Free Website w/ Email and FTP.		500MB Space No Ads, CPanel, FTP, PHP, MySQL, EMails - 100% FREE