+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.li/Forum-Website-Server-Hacking)
+--- Thread: Help with fixing exploits? (/Thread-Help-with-fixing-exploits)
Help with fixing exploits? - yxzy - 12-13-2012
I was just hoping that you guys could tell me about some common overlooked exploits often found in websites that could be harmful but when i say tell me about it i really want the fix, not how to do it.
Thanks!
RE: Help with fixing exploits? - Anima Templi - 12-13-2012
What do you mean by "show" do you think we are going to share vulnerable websites with you?
Start out with checking the website hacking tutorials and learn how a website functions. Learn SQL, PHP and Javascript and you will be able to find the vulnerabilities by yourself.
RE: Help with fixing exploits? - yxzy - 12-13-2012
No, i mean like tell me what the exploit is and how to fix it. And by this i meant the ones that often are overlooked, and i dont see too many fixes to exploits. Ill change "Show" To "Tell"
Sorry, i should of been more specific.
RE: Help with fixing exploits? - Faner - 12-14-2012
Basically there isn't too much to fix, just admins need to keep stuff up to date, and hacker won't find any public exploits for the website. Well, if hacker is smarter, and not some kind of skid, then he can try to find vulnerability in application's code (if application is open source). And from this there are very few ways to protect...
Also, as Anima Templi said, you should learn sql, php and javascript to understand what's the cause of vulnerability, so you will be able to fix it. If you'll ask where to learn it, I'd say that the best way to learn it is reading any good book about it and developing some sort of web project. For example most of my php and mysql experience I got while working on old web online game. Even though I gave it up after about 2 weeks, still knowledge gained in those 14 days is very useful.
RE: Help with fixing exploits? - The Real Slim Shady - 12-14-2012
(12-13-2012, 09:38 PM)yxzy Wrote: No, i mean like tell me what the exploit is and how to fix it. And by this i meant the ones that often are overlooked, and i dont see too many fixes to exploits. Ill change "Show" To "Tell"
Sorry, i should of been more specific.
Most vulnerabilities found in websites are generally caused by
a) poor programming practices
b) poor server configuration
or a combination of these 2 factors. Thus in order to fix these problems, and secure your site, you need to understand what constitutes insecure programming, and how to properly secure your server.
Just listing potentially overlooked vulnerabilities is pointless... cause we cant list ALL the possible points of attack. And a good hacker would be capable of finding the ones we didnt list for you
lolSo learn to program, and how your operating system works. Read articles on server security, etc. Cause really you need to know everything. If hackers know your system better than you do, youre going to get owned no matter what you try to do.