Trying to break into my own website to find security flaws

I’m trying to hack my domain to test the security of the website, the site is basically a stupid copy of a 3rd party game so mostly not my own code, just a bit here and there, which is why I don’t trust it. I’ve tried things like brute forcing, XSS, SQL injections, packet sniffing, dictionary attacks, flooding ports, doing dictionary attacks on the SSH and FTP logins as well as slow loris attacks, Rudy attacks and a layer 4 DoS. Everything seems fine.

Is there anything else I can try?

I can provide proof of ownership of the domain if anyone wants to PM and give it a go for me but I’d like to try and break into the site myself.

submitted by /u/WhatsTheAskMe
[link] [comments]

May 10, 2020
Read More >>