Ask about a PHP problem here.
janvier123
Posts: 23 Joined: Tue Apr 17, 2012 6:25 am
Post
by janvier123 » Thu Jun 21, 2012 6:10 am
Hi,
iam releaseing my "DAC" soon, so i want to hack my own stuff
This is to find bugs, un-protected vars / code ....
Any tips / ideas on how to tamper with your own work?$
Anything i should check / look at ?
ALL TIPS ARE HELPFULL
Thx
jacek
Site Admin
Posts: 3262 Joined: Thu May 05, 2011 1:45 pm
Location: UK
Contact:
Post
by jacek » Thu Jun 21, 2012 1:18 pm
Knowing about the various types of common exploits is probably the most useful thing you could do.
Then go through your code and look at the code from an attackers perspective and try to think about what they could send that would cause something unexpected to happen. That's generally my approach anyway.
janvier123
Posts: 23 Joined: Tue Apr 17, 2012 6:25 am
Post
by janvier123 » Fri Jun 22, 2012 5:02 am
Thx
ill watch them after work, any tools to play with ?
As a dev i have FireBug
jacek
Site Admin
Posts: 3262 Joined: Thu May 05, 2011 1:45 pm
Location: UK
Contact:
Post
by jacek » Fri Jun 22, 2012 7:02 am
There are a few tools for exploit scanning around although I have never used any of them. I imagine it would be faster to just go through the code
Helx
Posts: 350 Joined: Thu May 17, 2012 6:45 am
Location: Auckland, New Zealand
Post
by Helx » Sun Jun 24, 2012 12:06 am
jacek wrote: There are a few tools for exploit scanning around
Vicious stuff...
I would say I'm kinda safe from un-honest surfers with Cloudflare
(Not supposed to look like an ad, but I must say I do like it)