View Single Post
  #4 (permalink)  
Old 11-05-2007, 11:54 AM
wige's Avatar
wige wige is offline
Moderator
WebProWorld Moderator
 

Join Date: Jun 2006
Location: United States
Posts: 1,722
wige RepRank 4wige RepRank 4wige RepRank 4wige RepRank 4
Default Re: Question on maleware

That is a doozy of a question.

If I wanted to break into your site, I would go through a few steps. I would fingerprint the server (identify what is running on the server that I could attack), I would
test your web applications and forms, as well as the forms of other users hosted on the site looking for exploits, and then I would find a way to trick the server into thinking I had the access to write new data to the server. Unfortunately, because you are on a shared server there is almost no way to determine how a specific attacker breached your site - you don't have access to the logs, and you can't implement your own attack against the server to find probable targets that need to be patched.
__________________
The best way to learn anything, is to question everything.
Interestingly Average Security Blog
Reply With Quote