Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Note: This is for my personal use. I'm not going to hack someone else's website.
I have several websites, and I'd like to learn how to hack them so that I can secure them. Where can I find some good resources for learning how to hack my websites?

I already know about Hack This Site.

Could someone please change the tags, as I can't create new tags?

share|improve this question

closed as not a real question by Iszi, Ninefingers, Hendrik Brummermann, AviD Sep 23 '11 at 8:09

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

Please re-read our FAQ: Particularly important here is the section on Black Hat vs White Hat: "...if the question looks too much like a request for attack tools or mechanisms to spread a virus, it may be moderated." – Iszi Sep 22 '11 at 17:01
@Iszi I did read the FAQ, and I did note that. Thanks for warning me. Now would moderated mean closed, or would it mean changed? – daviesgeek Sep 22 '11 at 17:03
Unless you can form this into a real security question from a defensive posture, (as the FAQ says: "protecting assets from threats and vulnerabilities") I expect it to be closed. – Iszi Sep 22 '11 at 17:14
There's not nearly enough information to give a good answer - a question might say "My website uses $TECHNOLOGIES, what is best practice to keep them secure?"; but even that isn't a great fit for SE. – DanBeale Sep 22 '11 at 17:17

When it comes to websites, OWASP is a big part of that knowledge. Be familiar with their Top 10 and try them out on your site. There's a lot of other informative information there as well.

Beyond that, any resources related to pentesting are good starting points. Books about Penetration Testing is a good starting point there as well.

There are also a lot of related tools: What tools are available to assess the security of a web application?, and sometimes know those will point you down the right path.

If you're trying to learn a broad scope overview of something, I suggest also check out the tags: will show you a wealth of good resources to think about when designing you web applications / sites.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.