Hello there. HackForums is a wonderful place full of many wonderful, intelligent people in many fields. Of course, the people which HackForums attracts the most are going to be hackers, or individuals with hopes to learn how to hack. Unfortunately a very large number, if not the majority of these intrigued little hacking scholars get led in a very dark direction, which hardly benefits them at all, if at all that is. They decide to use automated tools to do things, and through that they learn little to nothing on actual Hacking. These people are usually referred to as skids which is a shortened form of script kiddies. I am not against these users by any means, but in my humble opinion it is far better to go down the road of real hacking. This thread will teach you how to do so.

I will not be covering RATing, E-whoring, or DDoSing in this guide as I do not deem these as "proper hacking methods". If what you came to HF for falls along those lines suggests that this thread won't assist you at all.

Table of Contents
- Introduction -
- Defining Hacking -
- Fields of Hacking -
- How to Hack -
- Closing -

Defining Hacking

Hacking has been defined by many things, and most people have their own opinions on what it is. I for one do not believe DDoSing is hacking, whilst I can assure you a vast majority of stresser/booter owners will assure you that it is and that it is a very vital tool for any hacker. So, I will not insist my opinion upon you, but rather give you the definition of hacking (or rather of hack, as it is the present participle of hacking).

Quote:Gain unauthorized access to data in a system or computer

Link to definition

Now of course there are multiple definitions of hacking, but I provided the definition which is related to the topic I am discussing today. Now take what you want from the definition. Maybe in your mind DDoSing is gaining unauthorized access to data in a system or computer, but in mine it is not. Now that you have (hopefully) formed an opinion on what hacking is, let's continue.

Fields of Hacking

Now there are many fields or areas of hacking. I personally specialize in Website Hacking as that is what interests me the most, thus I have studied it the most. In this chapter or section I would like to help you define what you would like to learn, or what you would like to learn first. There are three main hacking fields; Website hacking, Networking, and Systems/Servers. I will mostly be covering website hacking, but I ask that you do not let that make you click away from the thread. The basic principles of learning how to hack anything are the exact same. Besides, I'm not teaching you how to hack things, I'm teaching you how to learn.

Each field has its own lists of vulnerabilities, exploits, and tools that are used. For an example, as far as websites go there are several extremely popular vulnerabilities; SQLi, RFI, LFI, and XSS. Though some are more common than others, they are still out there. But of course there are more methods such as XFS and RCE. There are also automated tools to perform these attacks such as Havij for SQLi, as well as vulnerability scanners and website crawlers which essentially look for vulnerabilities and display web pages and directories such as Acunetix and OWASP ZAP.

How to Hack

Now of course this isn't as straight forward as this chapter's titles may suggest, especially as I won't actually be directly teaching you how to hack, but rather how to learn to hack. Now you must realize that hacking isn't straight forward and simple. Actually hacking is for the intelligent. Every time you attempt to hack something (by my standards, so not spreading malware) you are solving one massive and incredibly complex puzzle, which suggests that learning to solve these puzzles won't be the most incredibly simple thing in itself.

Now let me cover tools. Tools are helpful, and should be used to assist you. Not to do all of the work. Honestly, using tools will only help you so much. If you learn how to perform SQL injections through Havij you're volunteering to let all of the work done for you. But, will that really benefit you? Any site with decent security won't be able to be taken down by a simple tool. They need an intelligent being behind that tool. So if you are wanting to let tools do all of the work for you, if you are wanting to learn not how things work, but how to use automated software, if you are wanting to be a skid and be included in the vast majority I listed in the beginning of this thread, then please. Use those tools. Let them do everything for you. And definitely get off of this thread, because it is completely useless. There are loads of Havij tutorials for those interested. But, if you are wanting to actually learn how things work, if you are wanting to learn how to solve these complex puzzles, and if you are wanting to learn how to actually hack, then please continue, because this thread will help you.

Now I'm not saying tools are completely for skids and shouldn't be used, but they should be used to help. Not to do all of the work.

Now the fact that you are still here suggests that either you are going to use tools and are simply stubborn, or that you are actually wanting to learn how to hack. Now I recommend that you do so on every level. But, I cannot teach you everything I know here, so I will teach you how to actually learn. Here are some very helpful websites.

- https://hackforums.net (Great resource, but be careful not to be misled.)
- http://www.codecademy.com/ (Programming will certainly help you with hacking, and is good to know. This is a free resource which will teach you how to program in various languages.
- https://www.Udemy (warez disallowed).com/ (If you have money to spare then Udemy (warez disallowed) has online courses which will help you all the way from coding to basic to advanced hacking. Just be careful on which courses you buy.)
- http://google.com (Any questions? Use this.)
- https://www.owasp.org (One of the most helpful resources for website hacking.)
-https://hackforums.net/showthread.php?tid=3117173 (A training site for website hacking - credit to -Gator- for this one)

Now use these to learn. Do your own research. If you're brand new to this find vulnerabilities to study. OWASP has many for website hackers. If you're interested in servers, learn how they work and look into exploits. Same goes for networks. Honestly, no one can teach you everything. I've learnt all I know so far by teaching myself and doing research, along with the help of HF members and members of Legion. Learn how to do everything manually so that this actually benefits you. Now I know it's easier said than done, believe me. But this is how you learn. Do your own research. Be your own teacher.

Thank you for reading this. If you have any questions feel free to PM me. Note that I am not doing mentoring and I will not answer questions on mentoring. Also post in the proper section for your question. You will probably get a faster response that way.

Goodies, who is a friend of mine also has an Ebook which I have read through which would benefit those of any hacking field greatly. I would greatly recommend anyone who is interested in hacking check it out. Click me to go to the thread.

~ Dartlang, on behalf of Legion

(Sep 22, 2014 07:31 AM)Dartlang Wrote:  I will not be covering RATing, E-whoring, or DDoSing in this guide as I do not deem these as "proper hacking methods". If what you came to HF for falls along those lines suggests that this thread won't assist you at all.[/align]

Hacking has been defined by many things, and most people have their own opinions on what it is. I for one do not believe DDoSing is hacking, whilst I can assure you a vast majority of stresser/booter owners will assure you that it is and that it is a very vital tool for any hacker. So, I will not insist my opinion upon you, but rather give you the definition of hacking (or rather of hack, as it is the present participle of hacking).

Link to definition

Now of course there are multiple definitions of hacking, but I provided the definition which is related to the topic I am discussing today. Now take what you want from the definition. Maybe in your mind DDoSing is gaining unauthorized access to data in a system or computer, but in mine it is not. Now that you have (hopefully) formed an opinion on what hacking is, let's continue.

(Sep 22, 2014 10:00 AM)ShadowCloud Wrote:  DOS (And DDOS) can actually be used in hacking. It's an extremely advanced technique I'm referring to and not one I'd like to become common knowledge on HF to begin with, we'd have skids hitting anything and everything without understanding the implications of what they are doing, if you are interested, please feel free to hit me up via PM ;)

Apart from that though, absolutely fantastic thread for people starting out, hope to see some more stuff following this ;)

(Sep 22, 2014 11:25 AM)Dartlang Wrote:  I never said it can't be used. But, Ddosing itself is not hacking.