**Ask HN: What are security exploits to try on personal wbsite?** I'm interested in getting hands-on-experience on applying security exploits to my personal website. I'm a developer, but know an embarrassingly little amount of applied security exploits. I'm curious about this. From a previous post, it seems to me the suggestions for DDOS'ing (as a low-bar way to exploit) converge on hitting a expensive query/operation many times and this can be aided by various tools, such as botnets and load testing tools. What about other ... ⌘ Read more