DO NOT DEAL WITH THIS MEMBER
Hello,
I am thinking of starting new business which would be to find websites vulnerability, fix it and protect website from hacker's, but I am newbie at hacking, so I am thinking to find a partner which could do all the stuff.
So tell me guys how hard is to find website vulnerability and to fix it?
How long does it take?
Websites which are vulnerable have really low level of security, as these are local business and havent invested much into site security.
Also, how much it would cost to protect the site in high level and how much should website owner pay for such job ?
Apr 27, 2017 12:56 AM
(This post was last modified: Apr 27, 2017 12:56 AM by Nuclear3mbargo.)
Quote: Websites which are vulnerable have really low level of security, as these are local business and havent invested much into site security.
You will have hard time, since everybody those days is using wordpress, joomla or some similar CMS system(maybe drupal?). To keep those secure it's enough to update the system regularly,install a few plugins and not being an idiot.
DO NOT DEAL WITH THIS MEMBER
(Apr 27, 2017 12:25 AM)Yani Wrote: I suggest not starting a business in this area if you have no idea what you're doing.
Pretty much lol.
How do you plan to fix a website, if you have no idea what you're looking for? Do some research on the topic first.
If you need a partner.
First of all, you should try to find more than one partner.
As you wrote, you are a neewbie, that means you don't know how long time it actually takes to research the security of a website.
It usually takes a lot of time, and some people are specialized in things like Web Apps, other are specialized in other things.
But if you need a partner.
Make sure to find someone who know about,
Web Apps ( Wordpress - Joomla ) < -Just examples
SQLI, XSS, other kind of vulnerabilities.
And if he know how to read a code, it would be a lot better.
Many Researchers is using a bunch of tools, but it's better if you also know how to read code, like ( php, html, css, js )
I am new at the forum, but hit me up, I might be interested.
(Apr 27, 2017 12:25 AM)Yani Wrote: I suggest not starting a business in this area if you have no idea what you're doing.
Well put.
OP you are not going to be able to just jump into this area as a business with no knowledge of how to identify and fix web vulns.
Right now, depending on how much you know I would recommend just going for bug bountys. You may earn a few bucks, while learning how to identify, fix, and report vulnerabilities.
Can you hear my weed?
cuz it's loud
Apr 27, 2017 09:34 AM
(This post was last modified: Apr 27, 2017 09:35 AM by The Beep Beep Sheep.)
As stated before, I wouldn't start a business unless you have someone having your back.
You could start up a business for vulnerabilities in for example the OWASP top 10. These are fairly common and not that hard to fix. Things like path traversal, XSS, SQLi etc take little PHP knowledge to fix, but they do require understanding of the subject to even find and fix them.
I could give some advice if you're planning on going through. Just send me a PM.
I would learn basic web based coding languages first.
You need to put in work and time to get results.
Do you know how to execute a XSS or SQLi on a website manually without the use of a tool?
I would learn what it is actually doing before you go around with Automated tools.
|
