My website had been hacked. Hackers were able to access my database and inject some script into my database, now although I have recovered my website but I want to protect my website from further hacking incidence. So how can I know the vulnerabilities of my website, exploiting which they were able to hack it or how they can hack my database in future and place those types of scripts?
Finding out the vulnerabilities of a website isn't an easy task. It's quite time consuming, and laborious work. Finding the vulnerabilities in any site goes through following phases:-
- Reconnaissance :- Which is the act of gathering preliminary data or intelligence of your target.
- Scanning :- The phase of scanning requires the application of technical tools to gather further intelligence on your target, but in this case, the Intel being sought is more commonly about the systems that they have in place. A good example would be the use of a vulnerability scanner on a target network.
Even after all those hard work, there's a lot of chance that you would get nothing at your side. There are numerous situations when the vulnerability might be of the hosting site or of the database admin or any 3rd party database handlers.
I would definitely advise you leave the Information Security task to be handled by the professionals. It would rather be beneficial to leave it to the well reputed local security firms.