trparky
Bite My Shiny Metal Ass
Premium,MVM
join:2000-05-24
Cleveland, OH
clubs: | Web Site Exploit Testing
I'm wondering what I can do about testing a web site for exploits. I'm the sole developer of a web application and I want to test it for exploits.
--
Tom |
|
drew
Reformation
Premium
join:2002-07-10
Port Orchard, WA
clubs:
 ·wavebroadband
| Paging Steve  , Paging Steve . You have a call, please pick up any of the white courtesy telephones.
In the mean time, I'll point you here: »unixwiz.net/techtips/sql-injection.html as the first of many things to check for (provided you're working on a dynamic, db driven site)
--
Come play Mafia! | My Picture Blog |
|
trparky
Bite My Shiny Metal Ass
Premium,MVM
join:2000-05-24
Cleveland, OH
clubs:
1 edit | Oh yeah, it heavily depends upon MySQL for data storage and retrieval. I do use a database abstraction library, PearDB to be exact. I also use prepared SQL statements when I use queries.
--
Tom |
|
geekamongus
Real Slump Quality
Premium,MVM
join:2004-07-27
Asheville, NC
1 edit | reply to trparky
There are any number of vulnerability scanners and penetration testing apps out there:
»sectools.org/web-scanners.html
To learn more about web app security, I recommend starting with OWASP: »www.owasp.org |
|
