Web Site Pen Testing

siringo

Hoping someone can help me out with some basic info on how I can test a web site's security / robustness / aversion to being hacked.

One site is based on IIS, the other I'm not sure.

In a nutshell, I've just been given the responsibility of making sure the sites are secure. I've pretty much not got any experience with this and the first thing I want to find out, is if these sites are secure right now as if they're not, I need to make that known so they may be taken offline or fixed ASAP.

Thanks for any help.

IRJ

Here's a good free tool that I've used in the past.

https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project

siringo

@IRJ said in Web Site Pen Testing:

Here's a good free tool that I've used in the past.

https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project

Thanks @IRJ I'll check it out.