5465353535453435 Posted January 17, 2007 Share Posted January 17, 2007 (edited) I have a website called and I'm testing it's security. and I want to see how I could get into the server by hacking into it. Edited August 30, 2013 by 5465353535453435 Quote Link to comment Share on other sites More sharing options...
Sparda Posted January 17, 2007 Share Posted January 17, 2007 This is just pure HTML (with bits of flash and JavaScript) isn't it? Quote Link to comment Share on other sites More sharing options...
5465353535453435 Posted January 17, 2007 Author Share Posted January 17, 2007 (edited) _ Edited August 30, 2013 by 5465353535453435 Quote Link to comment Share on other sites More sharing options...
Sparda Posted January 17, 2007 Share Posted January 17, 2007 In that case it's not very vulnerable at all. The majority of vulnerabilities in web sites are bugs in PHP scripts (not PHP it's self). The biggest way your site is vulnerable your own access to it, your password strength, is the password sent over an encrypted (SSL or TLS) connection etc., not very vulnerable at all. The only other way is, obviously, though a vulnerability in the servers software, just keep the servers software up to date and your site is at very low risk. Quote Link to comment Share on other sites More sharing options...
5465353535453435 Posted January 17, 2007 Author Share Posted January 17, 2007 (edited) _ Edited August 30, 2013 by 5465353535453435 Quote Link to comment Share on other sites More sharing options...
psychoaliendog Posted January 17, 2007 Share Posted January 17, 2007 well according to the response headers your running version 2.0.46 of apache. A quick google revealed this. So, yes it is, venerable. You should make sure you are using the latest version of all of the software installed on the server. Quote Link to comment Share on other sites More sharing options...
Sparda Posted January 17, 2007 Share Posted January 17, 2007 I just want to qualify "The majority of vulnerabilities in web sites are bugs in PHP scripts (not PHP it's self).". It's not necessarily PHP, but any scripting language (PHP, ASP, Python, Perl etc.) that runs on the server. There are also what's known as cross site scripting vulnerabilities, but these (usually) do not pose a threat to the server it's self, the target for these kind of attacks are the users of the site. Quote Link to comment Share on other sites More sharing options...
VaKo Posted January 17, 2007 Share Posted January 17, 2007 Yeah, PHP scripts are the worst. At the hosting company I work at we take down about 50 sites a day due to bad scripts. (formmail scripts that will accept input from anywhere) Its very rare that we get boxes that have been rooted, and then its more likely to be lax passwords and unpatched windows exploits. Dumb admins must be the worse though. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.