Security Test

[jLamp]

Dear Friends,
I've created a lit bit advanced web site(Online Library System).
Before publishing it, now i wants to check its security level. I meant, can hackers attack my site? blah blah blah...
Is there any tools to check ???

[diafol]

There are loads out there. This is a download I used a while a go and it looks pretty comprehensive: http://www.subgraph.com/products.html

[radow]

There are many tools testing web sites. For example you can use w3af for testing xss attack, sqlmap for testing sql injection.

[diafol]

Here's a list of testers: http://www.opensourcetesting.org/security.php

[broj1]

And an excellent resource for web apps security is OWASP and their Top 10 cheat sheet. Go through their list.

[cereal]

This is my little list of test tools:

• http://code.google.com/p/skipfish/
• http://cirt.net/nikto2
• http://w3af.org/
• http://wapiti.sourceforge.net/
• http://sourceforge.net/projects/sqlmap/

Consider also to use BackTrack or Samurai, a live distro focused only in web sites testings. Bye!

[jLamp]

Thanks All.