Security Basics mailing list archives
Re: New to Hacking .. Help !!
From: Peter Thomas <hackertarget.admin () gmail com>
Date: Wed, 14 Oct 2009 08:23:16 +1100
Go with these hackable test tools to start with these as suggested by John. http://www.damnvulnerablelinux.org/ OWASPs webgoat http://www.owasp.org/index.php/Category:OWASP_WebGoat_Project hankmebank, hankmebooks, hankmeshipping etc. http://www.foundstone.com/us/resources-free-tools.asp Build a lab, get comfortable with Linux and VMWare Server or VirtualBox. You could then move onto installing vulnerable apps in your lab and exploiting them (see Milw0rm for ideas). Finally start looking for new vulnerabilities in open source and closed source software that you have access to. Regards, Peter ------------------------------------------------- Vulnerability Assessment - Online http://www.hackertarget.com ------------------------------------------------- On Tue, Oct 13, 2009 at 7:31 PM, Robert Larsen <robert () the-playground dk> wrote:
Paul Jenkins wrote:I think I know where you're coming from; I'll say find some war-game websites. Happyhacker.org has a few links, my favorite is hackthissite.org. Great support forums and good information. HOWEVER do not do this from a "gov" system, provided they don't have the sites filtered (partly my fault I'm sure) further in the "game" will likely set of the IDS/ASIM (been there done that as well). Learn all you can, -PaulHi I created a bunch of wargames a while back. They can be downloaded from here: http://www.the-playground.dk/pmwiki.php?n=Projects.Wargames The site is in danish but each wargame zip file contains a README in english. Go nuts!
------------------------------------------------------------------------ Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1 ------------------------------------------------------------------------
Current thread:
- Re: Testing for SQL injection or Cross Site scripting, (continued)
- Re: Testing for SQL injection or Cross Site scripting Fabien Vincent (Oct 08)
- Re[2]: Testing for SQL injection or Cross Site scripting Adam Pal (Oct 13)
- Re: Re[2]: Testing for SQL injection or Cross Site scripting mojorising (Oct 14)
- Re: Re[2]: Testing for SQL injection or Cross Site scripting Peter Thomas (Oct 14)
- Re: New to Hacking .. Help !! { Feeyo|NixDevs } (Oct 07)
- RE: New to Hacking .. Help !! Rivest, Philippe (Oct 08)
- RE: New to Hacking .. Help !! Craig Wilson (Oct 08)
- Re: New to Hacking .. Help !! Wim Remes (Oct 07)
- RE: New to Hacking .. Help !! Paul Jenkins (Oct 07)
- Re: New to Hacking .. Help !! Robert Larsen (Oct 13)
- Re: New to Hacking .. Help !! Peter Thomas (Oct 14)
- Re: New to Hacking .. Help !! Robert Larsen (Oct 13)
- Re: New to Hacking .. Help !! jfvanmeter (Oct 08)
