I'm currently developing a web application which has a lot of javascript working behind it. Before I deploy it (which will take a couple of months), I want to make sure that it is atleast a bit secure in terms of attacks.

I saw this link already but it doesn't have any resources that I could use to learn the 'art' of hacking. I don't want to exploit other sites, I just want to learn it to make my site safe.

  • 3
    Hacking/Security -- IT Security is more appropriate site: security.stackexchange.com -- have a look there.
    – LazyOne
    Jul 5, 2011 at 12:29
  • Thank You. That seems to have what I wanted! Sry, I can't upvote you yet.. Jul 5, 2011 at 12:59
  • If you want to secure your web app, then you need to learn about web security, which includes common attacks & vulnerabilities, but also covers the standard defenses against them and general best practices. Focusing on resources that only teach you how to hack websites is the wrong way to go about it, as it won't give you the whitehat knowledge developed for/by security professionals. E.g. you might learn about the common scripts used to exploit websites, but you won't learn about coding practices that lead to less security bugs. Jan 6, 2012 at 15:58

2 Answers 2


The standard authority in this area is probably OWASP. See in particular the OWASP Top 10, which describes the most widespread and dangerous security mistakes.


You may be interested in this Linux distro. I stumbled upon it a few months ago. Definitely useful for what you are trying to accomplish. Hope this is helpful.


Not the answer you're looking for? Browse other questions tagged or ask your own question.