php security tools

[JonDavis]

Hi All,

I am new here and new to PHP...so please be gentle!

I was wondering if there is any kind of tool/framework/plug-in available which will help me find security holes in my bespoke software developed using PHP. For obvious reasons, I cannot make the application public...but any advice/guidance/best practice guide would be really appreciated.

Has anyone used or can recommend any free/open source penetration testing tools which would highlight the most common security mistakes?

Thank you in advance!

Jon

[traq]

OWASP is a good place to start. They have a pentesting project as well, but I've never used it.

Unfortunately, you're going to be pretty much "on your own" if you don't release the software to anyone. You might look into hiring a consultant to try to break it.

[JonDavis]

H Trag,

Hmm..Guess I am stuck between a rock and a hard place 🙁

The closest I will get to releasing a similar application would be by Forum http://www.bespokesoftwaredevelopment.com/blog/ ....but that again would not do me any good as it runs in a completely different environment.

I had a quick look at OWASP...looks good. It will keep me busy for a few nights 🙂.

Looks like there is a gap in the market for any security expert to develop something generic which with minimum configuration tests how secure your application is.

Anyways, thanks for your post.

Jon