How to hack my own site tips please

[5465353535453435]

I have a website called and I'm testing it's security. and I want to see how I could get into the server by hacking into it.

Edited August 30, 2013 by 5465353535453435

[Sparda]

This is just pure HTML (with bits of flash and JavaScript) isn't it?

[5465353535453435]

_

Edited August 30, 2013 by 5465353535453435

[Sparda]

In that case it's not very vulnerable at all. The majority of vulnerabilities in web sites are bugs in PHP scripts (not PHP it's self). The biggest way your site is vulnerable your own access to it, your password strength, is the password sent over an encrypted (SSL or TLS) connection etc., not very vulnerable at all. The only other way is, obviously, though a vulnerability in the servers software, just keep the servers software up to date and your site is at very low risk.

[5465353535453435]

_

Edited August 30, 2013 by 5465353535453435

[psychoaliendog]

well according to the response headers your running version 2.0.46 of apache. A quick google revealed this. So, yes it is, venerable. You should make sure you are using the latest version of all of the software installed on the server.

[Sparda]

I just want to qualify "The majority of vulnerabilities in web sites are bugs in PHP scripts (not PHP it's self).".

It's not necessarily PHP, but any scripting language (PHP, ASP, Python, Perl etc.) that runs on the server. There are also what's known as cross site scripting vulnerabilities, but these (usually) do not pose a threat to the server it's self, the target for these kind of attacks are the users of the site.

[VaKo]

Yeah, PHP scripts are the worst. At the hosting company I work at we take down about 50 sites a day due to bad scripts. (formmail scripts that will accept input from anywhere) Its very rare that we get boxes that have been rooted, and then its more likely to be lax passwords and unpatched windows exploits. Dumb admins must be the worse though.