Note: This is for my personal use. I'm not going to hack someone else's website.
I have several websites, and I'd like to learn how to hack them so that I can secure them. Where can I find some good resources for learning how to hack my websites?

I already know about Hack This Site.

Could someone please change the tags, as I can't create new tags?

  • Please re-read our FAQ: security.stackexchange.com/faq Particularly important here is the section on Black Hat vs White Hat: "...if the question looks too much like a request for attack tools or mechanisms to spread a virus, it may be moderated." – Iszi Sep 22 '11 at 17:01
  • @Iszi I did read the FAQ, and I did note that. Thanks for warning me. Now would moderated mean closed, or would it mean changed? – daviesgeek Sep 22 '11 at 17:03
  • Unless you can form this into a real security question from a defensive posture, (as the FAQ says: "protecting assets from threats and vulnerabilities") I expect it to be closed. – Iszi Sep 22 '11 at 17:14
  • There's not nearly enough information to give a good answer - a question might say "My website uses $TECHNOLOGIES, what is best practice to keep them secure?"; but even that isn't a great fit for SE. – DanBeale Sep 22 '11 at 17:17

When it comes to websites, OWASP is a big part of that knowledge. Be familiar with their Top 10 and try them out on your site. There's a lot of other informative information there as well.

Beyond that, any resources related to pentesting are good starting points. Books about Penetration Testing is a good starting point there as well.

There are also a lot of related tools: What tools are available to assess the security of a web application?, and sometimes know those will point you down the right path.

If you're trying to learn a broad scope overview of something, I suggest also check out the tags: https://security.stackexchange.com/questions/tagged/attack-prevention will show you a wealth of good resources to think about when designing you web applications / sites.

Not the answer you're looking for? Browse other questions tagged or ask your own question.