.

Testing my xoops

<<

Calimar

Newbie
Newbie

Posts: 1

Joined: Thu Apr 19, 2007 4:11 am

Post Thu Apr 19, 2007 4:20 am

Testing my xoops

Hello all,

I'm quite sure you've read this question a lot (and I'll be searching your forums for the answers you have already given...), but I'm in need of some help.

My website has been hacked, and some files injected which redirect to a phishing website. This has caused me a ton of potential legal problems, which I would like to prevent for the future :)

The ISP hosting the domain told me they see no "weird" activity (they did not define weird) so it's probably a problem with my scripts.
My website hosts only a xoops installation (object oriented cms), and I'd like to test it to verify how safe it is.
Can you give me some pointers to the attack methods or anything that might help me?
I would appreciate it.

Thank you in advance!
Calimar
<<

Cutaway

User avatar

Jr. Member
Jr. Member

Posts: 96

Joined: Mon Nov 20, 2006 5:02 pm

Post Thu Apr 19, 2007 8:30 am

Re: Testing my xoops

Calimar,
 
  Testing web applications is not something that you just jump into and get done.  There are many factors to it.  My suggestion to you is that you first consider how you have deployed your application.  You should look at resources like OWASP http://www.owasp.org/index.php/Main_Page which has guides to secure deployment and considerations for writing scripts that permit user interaction.  You will also find some useful guides to assessing your applications and tools to assist with the assessment.

  Don't forget to check out the XOOPS forums http://www.xoops.org/modules/newbb/.  I am willing to bet that somebody here has had the same experiences you have and they will be able to assist you.  If nobody has experienced your problems then the experts monitoring these forums are going to want to know about your issues so that they can begin to address them within their environments.

Go forth and do good things,
Cutaway
Go forth and do good things,
Cutaway

Return to Network Pen Testing

Who is online

Users browsing this forum: No registered users and 0 guests

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software