NYCPHP Meetup

[Gary Mort]

On Mon, Dec 13, 2010 at 10:20 AM, Chris French <chris at theendrecords.com>wrote:

> Mitch is right,
>
> If you are interested in security you can help yourself 1000 fold if you
> just read a little bit about security and the web with joomla specifically
> your worst nightmare is bad file permissions, if your setting anything to
> chmod 777, You are setting yourself for trouble.
>
> Second you need to update joomla as soon as a new patch comes out the same
> goes for your components as well.
>
> You should also check this out
>
> http://sectools.org/web-scanners.html
>
> I haven't used most of them but they could help you.
>
>
Ahh, that was the link I forgot.

Nikto has a plugin for Nessus, so you can use Nessus to call Nikto...also
their current data on Nikto is both accurate and inaccurate.  Nikto itself
is fairly long in the tooth and dead, but Nikto2 is active and current.  And
the link for Nikto takes you to Nikto2
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20101213/a3164e9c/attachment.html>