How to check a site for vulnerabilities?

Question

Burglary protection

Created a job site for a small town. Now I'm thinking of patching up the site's holes, if any.

There is no experience in hacking and protection from them. So help is needed.
Can someone test the site for vulnerabilities? Willing to pay symbolically.

Answer 1

McLean, let's try to dig deeper
. Agree that using other people's utilities is a dead end.
It would be very interesting to learn how to test sites for vulnerabilities (let's take the same sql injection as an example) using programming languages
. each programmer could implement in his own language

Answer 2

Vulnerabilities can be conditionally divided into levels at which they are located according to the OSI model.
1) OS network stack vulnerabilities
2) Ports opened by mistake (DB sticking out without authorization).
3) Vulnerabilities associated with the operation of application protocols due to outdated software versions (ssh, ftp)
4) Weak passwords (For ssh, ftp, mysql).
5) Vulnerabilities in web applications (OWASP TOP 10)
For each individual vulnerability and for each individual type, there are different utilities for checking.
You can start with Nmap and continue by reading the OWASP Web Application Security Guide.
There are special resources, vulnerability scanners that can check most vulnerabilities at each level.
https://metascan.ru
https: //acunetix.com
https://detectify.com