Suggestions for "Torture Testing" a Membership site
Hi
A friend of mine has asked me to try and "attack" his membership site for the purposes of seeing if I can do it and thus expose any security holes he may have overlooked.
I'm a developer and programmer but not a hacker! I have written code to prevent common attacks like SQL injections and I have worked with encrypted data but I really don't know where to begin with this. But it is an interesting challenge, especially as I have a site of my own that I'd like to test as well!
I don't want to delve to deeply into the "dark" side of the web and the last thing I want to do is have this post become a repository of hackers tricks! What I was wondering was if anyone had any suggestions as to any standard tests that I could perform to see if he has all the basics covered?
Thanks
Bill
A friend of mine has asked me to try and "attack" his membership site for the purposes of seeing if I can do it and thus expose any security holes he may have overlooked.
I'm a developer and programmer but not a hacker! I have written code to prevent common attacks like SQL injections and I have worked with encrypted data but I really don't know where to begin with this. But it is an interesting challenge, especially as I have a site of my own that I'd like to test as well!
I don't want to delve to deeply into the "dark" side of the web and the last thing I want to do is have this post become a repository of hackers tricks! What I was wondering was if anyone had any suggestions as to any standard tests that I could perform to see if he has all the basics covered?
Thanks
Bill
-- Lisa G