I’m quite sure you’ve read this question a lot (and I’ll be searching your forums for the answers you have already given…), but I’m in need of some help.
My website has been hacked, and some files injected which redirect to a phishing website. This has caused me a ton of potential legal problems, which I would like to prevent for the future 🙂
The ISP hosting the domain told me they see no “weird” activity (they did not define weird) so it’s probably a problem with my scripts.
My website hosts only a xoops installation (object oriented cms), and I’d like to test it to verify how safe it is.
Can you give me some pointers to the attack methods or anything that might help me?
I would appreciate it.
Testing web applications is not something that you just jump into and get done. There are many factors to it. My suggestion to you is that you first consider how you have deployed your application. You should look at resources like OWASP http://www.owasp.org/index.php/Main_Page which has guides to secure deployment and considerations for writing scripts that permit user interaction. You will also find some useful guides to assessing your applications and tools to assist with the assessment.
Don’t forget to check out the XOOPS forums http://www.xoops.org/modules/newbb/. I am willing to bet that somebody here has had the same experiences you have and they will be able to assist you. If nobody has experienced your problems then the experts monitoring these forums are going to want to know about your issues so that they can begin to address them within their environments.
Go forth and do good things,
Viewing 1 reply thread
You must be logged in to reply to this topic.
– EH-Net Live!Thurs Oct 29 @ 1:00 PM US ET. Details Coming Soon!