-2

I'm not quite sure this is the place for such questions, but stackoverflow or superuser seem even less appropriate, so.

I want to ask if there is some kind of a site or service, similar to the stackexchange sites, where enthusiast hackers can offer some services for free in their spare time. What I need in particular is someone to try and hack my server, I will give them addresses and everything they need, that is public information. I want to make sure my server is secured properly, since I'm self taught, I don't really know if I did a good job or not.

1 Answer 1

11

You're looking for a penetration tester.

You could also invite people on the net to try and hack your server, but that's a very risky business - you never know who's going after it. Telling the entire world that you may be vulnerable is... probably not a wise decision.

Professional penetration testers are skilled professionals, so be prepared to pay.

7
  • 2
    Luckily, we're not people on the net, or else this would be a risky proposition.
    – iAdjunct
    Commented Aug 4, 2016 at 13:34
  • Well, it may not be a good idea to tell the world I'm vulnerable, but it's a worse idea to not know I'm vulnerable, I think? I would rather get wrecked now, than some day when I least expect it :D
    – php_nub_qq
    Commented Aug 4, 2016 at 13:38
  • 1
    @S.L.Barth Thanks for the concern. I'm a pretty advanced PHP developer (moment of glory) and I'm pretty certain my scripts are secure, what I'm worrying about is the linux administration (ports and services and stuff like that) in which I'm not very experienced.
    – php_nub_qq
    Commented Aug 4, 2016 at 13:43
  • 1
    I suppose some of the individual aspects of your setup could be answered on Server Fault, Unix & Linux or [AU.SE], if they aren't already. Explain enough about your system, while staying on-topic, and you may get some advice on things you hadn't thought about as well. Also, we have some canonical questions about server hardening here on Security.SE - like this one. Commented Aug 4, 2016 at 13:51
  • 3
    +1 to the warning about asking strangers from around the internet to hack your server. @php_nub_qq, you should definitely pursue a professional penetration testing service. Also, I am sure the members of the StackExchange sites would be willing to look over segments of your existing code and let you know if anything stands out. However, do not just ask strangers to hack your website. They could say "everything looks good", when there are actually issues, either because they simply are not qualified to determine if the server/site is truly safe, or so they can come back and hack it later.
    – Spencer D
    Commented Aug 4, 2016 at 16:57

Not the answer you're looking for? Browse other questions tagged .