hacking

[new2this]

I am wondering where I should go to find people willing to hack into a site for me, to test security. Any suggestions?

[Itchybug]

Call a Federal Prison in your area.

[JamieR]

Expect a mod or George to delete this thread, as it is in voilation of the rules.

Jamie.

[ronaldb66]

Heh... ;) Maybe you can give this guy (http://www.codingforums.com/showthread.php?t=57808) a call... :D

No, seriously: since I loathe the act of hacking, no matter what lofty ideals these people pretend to have I wouldn't know, but I'm sure you can find some forums on the web frequented by them through Google.
Be aware though that inviting in someone you don't know to "test" you security measures might be asking for a lot more then you expected... :(

[JamieR]

who owns the website? if it isn't yours, and you don't host it, then its illegal.

[new2this]

it is my own site (well, a site I am designing for someone else) and I am hosting it at the moment.

And I didn't think I violated rules or COC, as I read them before the post, and this is not illegal activity - and I am not asking for someone to hack my site in this post.

I am asking for info on how to find people to do it.

If I misunderstood, and this is in violation, please do delete the post. Otherwise, I hope to get an answer or two.

[JamieR]

I dunno, maybe I misunderstook what you said. I thought that asking or promoting any hacking activity on here was in voilation of the TOS.

[new2this]

Unless there is hidden fine print I missed it doesn't say anything about hacking - and I am not trying to be sarcastic or legalistic here - but I did try to read and make sure before I posted.

I checked the rules and guidelines linked at the top, and looked for any other links to similar. The only thing I saw that might relate was:

"1.4) No illegal requests- Do not post requests that are illegal or break the usage terms of the service in question, such as where to download warez, disable pop up ads on your free host etc."

But I am not asking for something illegal (it is my site hosted by me) - and even then I am not asking for anyone to hack my site, just to point me to where I can find someone on another forum or something.

[JamieR]

Okies, sorry :)

[gsnedders]

To quote George (WA), the admin: This sounds like a legitimate request, but unfortunately, any sort of hacking is against our rules at present, even if it's your own site. It creates a kind of culture that can easily cross over to hacking other people's sites. Due to this, I'm afraid your URL has been removed.

[mark87]

Well I'm hoping this isn't against the TOS but to be honest the things you gotta look out for, for vunerabilites I guess, is SQL injection (used to retrieve information from SQL databases such as usernames and passwords) and XSS injection (used to inject code, normally javascript, into pages - eg. guestbooks - also used to steal cookies). If you google those terms you'll find many ways of prevention. :)

[iota]

Yeah, there are a lot of professional hackers team around the world. :)

You must pay money for their hacking into your site.

They check every security holes and close any graps by breaking in.

[WA]

As Error 404 quotes, any sort of hacking request isn't appropriate on CF, for the reasons already mentioned. Asking where you can find such hackers is just getting around this rule. It's very easy for someone to make a seemingly legitimate hacking request for testing purposes when in fact it's someone's else's site. Even if the request is legitimate, I for one believe these kinds of threads promote a loose culture on CF just waiting to explode.

Due to this, closing thread.