[flagjack]

I'm really interested in hacking and I all-ways thought it was impossible until I found hackforums.net where I can learn
so me and my friend own this website beautifulcraft.ru and we were interested how it could be hacked so we can later improve it and learn at the same time

[ThomasGB]

check your forum IPS version if it has any vulns

avoid sql injections

[SIM-974023]

Why do you recommend avoiding SQLi?

[V3N0M]

Why do you recommend avoiding SQLi?

are there still any sites that you can SQLi really?

[FamousHater]

i would teach u op but u havent done anything for HF

[ernestmiller]

Just use Burpsuite Pro it has everything for web app pen tetsing proxy all the traffic as you manually traverse your site analyse every parameter for possible injection, brute force with Intruder on login forms, Repeater to repeat quest and see how the server handles input.

For a scanner use Nikto, not Vega its full of false positives, also use OWASP ZAP proxy to spider the site and dirbuster.

Yeah SQLI is not really around anymore and if you have a WAF its going to be to try and bypass, may be worth running through sqlmap though on any parameters that are potentially vulnerable