Any software tool/site that can perform a security check of a target IP?

[NickK]

I expect there are good ones and bad ones but I'm looking for a vulnerability testing tool for an apache website. Basically run Apache2 with the service and then let the tool find any gotchas.

The web service behind it will be only answering OpenSSL (real cert) with apache and cgi-bin written in Objective-C sat behind it. Unfortunately I can'd 2SSL it as mobile phone apps addresses change dynamically (or all the phones on O2 will report the O2 data gateway as the source).

Additionally are there apache hardening guides/books that people here use?

 

[tntcoder]

Make sure your Apache server is well patched.

I like Nikto for web vulnerability analysis, very good IMO. Check it out here: http://cirt.net/nikto2?quicktabs_1=1#quicktabs-1

You should also check the host server, Nessus is a top notch system level vulnerability scanner. http://www.nessus.org

And here's a good secure configuration guide for Apache: http://xianshield.org/guides/apache2.0guide.html

 

[NickK]

Nessus is awesome fun

 

[davetherave2]

if your looking for good resources try this:

http://www.owasp.org/index.php/Main_Page

loads of helpful stuff for all manner of security related hardening of applications.