Message Turncoat in a DM to get moderator attention

Users Online(? lurkers):
8 posts
0 votes

hacker essentials


Posts: 66

i am gonna tell you some things you need to know about before you try to hack anything.

bash shell script-

unless you plan on using wInDoWs for your hacker tricks, you will need to know about bash (aka bourne again shell) which is the language for the linux command line/terminal/shell.

c language-

yes it is hard but hey if you dont like it try harder. this language is excellent at memory allocation and you will need it for a lot of attacks that involve the stack/scheduler/memory buffers. you may not necessarily need it if you just plan on using premade tools but really you will use those tools so much more effectively if you understand what they are actually doing for you. this one is really important because many exploits involving c are remote code execution to totally pwn someones device entirely.

javascript/html/css and knowledge of the http protocol-

you may find these lame and maybe they are from a customisation standpoint, but they are necessary if you ever plan on doing attacks on the web applications itself, like cross site scripting. most sites are not vulnerable to what you see in the guides and cheat sheets, but also most sites are vulnerable to something and knowing how these languages work and how your browser interprets them makes all the difference in finding your own creative exploits.

python language-

sometimes to take down a whale you need a harpoon. python is that harpoon. it is great for quickly and effectively creating your arsenal of hacking tools and if you know it you can basically automate any hacking task you want. 

knowledge of client/server infrastructure, protocols, ports, domains, sockets, requests, ect-

in a nutshell you really ought to study how networking (not the social kind) works as a whole so you get an idea of how it all comes together.

ruby and the metasploit framework-

up until here ive made this list in a way that promotes learning the fundamental knowledge of networking and programming rather than point you to script kiddie tools for you to use blindly, but it wouldn't be complete without mentioning metasploit. it is a massive hacking framework/tool. dont use it without knowing everything above, but once you do having this under your belt in incredibly useful, especially as far as remote access goes. ruby is very similar to python and is the language metasploit is coded in. you should learn it because it is a good language and also because with it you can modify and create metasploit modules which is pretty useful.

aside from that, ill let you learn on your own. remember, creativity and using your brain trumps cheat sheets. cheers.

Posts: 33587
0 votes RE: hacker essentials

Who's reading these? 

Show of hands? 

Ę̵̚x̸͎̾i̴͚̽s̵̻͐t̷͐ͅe̷̯͠n̴̤̚t̵̻̅i̵͉̿a̴̮͊l̵͍̂ ̴̹̕D̵̤̀e̸͓͂t̵̢͂e̴͕̓c̸̗̄t̴̗̿ï̶̪v̷̲̍é̵͔
Posts: 1110
1 votes RE: hacker essentials

Who's reading these? 

Show of hands? 

 I am, but I'd like something more in-depth. Akin to "baby's first sql injection".

A shadow not so dark.
Posts: 66
0 votes RE: hacker essentials

Who's reading these? 

Show of hands? 

 I am, but I'd like something more in-depth. Akin to "baby's first sql injection".

 (see my recent cross site scripting post)

Posts: 66
0 votes RE: hacker essentials

Who's reading these? 

Show of hands? 

 your mom

Posts: 2890
0 votes RE: hacker essentials

No client-side application is secure. Only server-side applications can be secure.

Cheery bye!
Posts: 312
0 votes RE: hacker essentials

C is quite useless at the present unless you are writing shellcodes / unix privilege escalation tools. Go and Python run the show (the script that brought down SC in 2018 for a week was written in Go).

Right now, if you are looking to make money, microservices and web app exploitation is the way to go. Theres lots of vulnerable payment processor wordpress plugins and small crypto exchanges waiting to get hit.

 

Posts: 66
0 votes RE: hacker essentials

C is quite useless at the present unless you are writing shellcodes / unix privilege escalation tools. Go and Python run the show (the script that brought down SC in 2018 for a week was written in Go).

Right now, if you are looking to make money, microservices and web app exploitation is the way to go. Theres lots of vulnerable payment processor wordpress plugins and small crypto exchanges waiting to get hit.

 

 C can be good for buffer overflows however which is a really good exploit if you can get it to work

8 posts
This site contains NSFW material. To view and use this site, you must be 18+ years of age.