Tell me more ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.
up vote 2 down vote favorite

I'm currently developing a web application which has a lot of javascript working behind it. Before I deploy it (which will take a couple of months), I want to make sure that it is atleast a bit secure in terms of attacks.

I saw this link already but it doesn't have any resources that I could use to learn the 'art' of hacking. I don't want to exploit other sites, I just want to learn it to make my site safe.

share|improve this question
3  
Hacking/Security -- IT Security is more appropriate site: security.stackexchange.com -- have a look there. – LazyOne Jul 5 '11 at 12:29
Thank You. That seems to have what I wanted! Sry, I can't upvote you yet.. – Diff.Thinkr Jul 5 '11 at 12:59
If you want to secure your web app, then you need to learn about web security, which includes common attacks & vulnerabilities, but also covers the standard defenses against them and general best practices. Focusing on resources that only teach you how to hack websites is the wrong way to go about it, as it won't give you the whitehat knowledge developed for/by security professionals. E.g. you might learn about the common scripts used to exploit websites, but you won't learn about coding practices that lead to less security bugs. – Lèse majesté Jan 6 '12 at 15:58

2 Answers

up vote 1 down vote

The standard authority in this area is probably OWASP. See in particular the OWASP Top 10, which describes the most widespread and dangerous security mistakes.

share|improve this answer
up vote 0 down vote

You may be interested in this Linux distro. I stumbled upon it a few months ago. Definitely useful for what you are trying to accomplish. Hope this is helpful.

http://www.backtrack-linux.org/

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.