+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: >>> [Mega-Guide] How To Become a Skilled Hacker [Must-Read] (/showthread.php?tid=4732634)
>>> [Mega-Guide] How To Become a Skilled Hacker [Must-Read] - Disparity - Mar 15, 2015
How To Become a Skilled Hacker
Table of Contents
1. Defining a 'Hacker'
2. Different Types of Hacking
3. Learning how to Hack
4. Ethics
5. Appreciation
Defining a 'Hacker'
Hello there. My name is Disparity. Recently I have started to get into this forum, and I've seen a fair amount of good in it, and I am considering upgrading. However, I have noticed an overwhelming number of skill-less 'Hackers'. Is that a bad thing? Not necessarily. There is no wrong in lacking skill or experience. However, many of these 'Hackers' claim to be skilled and act tough when they spend their time spreading malware and screwing people over for 'The Lulz'.
That brings me on to my next subject. Now this is of course a guide on how to become a skilled hacker. I'm not going to provide you with a godly guide on how to hack anything. Instead, which I'm sure some of you will be disappointed to see, I am going to provide you with the proper mindset and base knowledge on becoming a skilled hacker. But in order to do so, we first must define a hacker.
According to the Merriam Webster Dictionary, a hacker is
Table of Contents
1. Defining a 'Hacker'
2. Different Types of Hacking
3. Learning how to Hack
4. Ethics
5. Appreciation
Defining a 'Hacker'
Hello there. My name is Disparity. Recently I have started to get into this forum, and I've seen a fair amount of good in it, and I am considering upgrading. However, I have noticed an overwhelming number of skill-less 'Hackers'. Is that a bad thing? Not necessarily. There is no wrong in lacking skill or experience. However, many of these 'Hackers' claim to be skilled and act tough when they spend their time spreading malware and screwing people over for 'The Lulz'.
That brings me on to my next subject. Now this is of course a guide on how to become a skilled hacker. I'm not going to provide you with a godly guide on how to hack anything. Instead, which I'm sure some of you will be disappointed to see, I am going to provide you with the proper mindset and base knowledge on becoming a skilled hacker. But in order to do so, we first must define a hacker.
According to the Merriam Webster Dictionary, a hacker is
Quote:computers : a person who secretly gets access to a computer system in order to get information, cause damage, etc. : a person who hacks into a computer systemhttp://www.merriam-webster.com/dictionary/hacker
Now in a way this is somewhat subjective to an individual. I personally despise RATing and find those who do it pathetic. As unfortunate as it is to say, it is by definition hacking. However, I am not going to waste either your nor my time explaining how to do things like that here. Nothing even remotely similar to it either. I repeat.
In this guide you will learn nothing of RATing, Social Engineering, DDoSing, or anything closely related.
Why? Because for one two of the three direct examples listed aren't hacking (though they can be rather helpful) but because I am the one writing this guide and despise all three of the direct examples (in most cases).
Now that I've spat that out, let's move on.
Different types of Hacking
There are many different types of hacking which can all be divided into their own sections as well. However, I like to split them up into a few main sectors.
- Website Hacking
- Network Hacking
- Operating Systems
- Server Hacking
- Skiddy Activities
Now these are all rather self explanatory. However, I will define them.
Website Hacking
Website Hacking goes hand in hand with nearly all other main sectors. In fact, they all go hand in hand.
However, Website Hacking directly relies on vulnerabilities/exploits or security flaws in the code which makes up websites. Whilst hacking we can utilize these security flaws to send malicious payloads to the server hosting the website (again referencing how different sectors go hand in hand) to damage the website or server. There are many different vulnerabilities. Some known, some unknown.
Here are a few of the most frequently abused vulnerabilities:
- SQL Injections (SQLi)
- Cross Site Scripting (XSS)
- CSRF (Cross-Site Request Forgery)
- RFI (Remote File Inclusion)
- LFI (Local File Inclusion)
These are only a very few vulnerabilities. You can find many more on websites such as the official OWASP website. If you are interested in Website Hacking I would highly recommend you look into all of the ones mentioned and many more.
Network Hacking
Network Hacking is very self explanatory as well. I specialize primarily in Website Hacking, so I am not going to supply nearly as much information on Network Hacking or any other hacking sections.
Operating Systems
OS Hacking is technically related to malware. However, it is directly connected to all other sections as Operating Systems allow us to connect to the other sectors.
Operating Systems are often abused through exploits in which attackers can do a very large multitude of things to harm the user receiving the attacks.
Server Hacking
Server Hacking and Website Hacking go hand in hand as the server is what hosts the website. Servers are often used to target websites, and websites are often used to target servers. When attacking servers users will often utilize vulnerabilities in websites which can give them direct access to servers or they will directly attack the servers themselves using a multitude of methods.
Skiddy Activities
Using booters, RATing, spreading malware, anything. All skiddy activities. It makes me sick.
Learning how to Hack
Oh, what you've all been looking forward to. Well, here it is. Learning how to hack.
Now as I stated in an earlier chapter I am not going to directly teach you any methods on how to hack. I am going to teach you the mindset.
Now let me tell you this; Hacking is not for the soft hearted or lazy. It takes hours and hours of dedication to learn to become a skilled hacker. Would I consider myself one at this point? Fuck no. I've got a long way to go.
Now we need to understand that the whole technological world is made up of different languages. They run everything.
Whether it's PHP and HTML running a website, SQL running a database, ASM powering and operating system, everything is ran in code. It's important to understand this and at the very least understand how these languages function in order to hack.
Going back to Website Hacking as an example as I am very familiar with it. If I wanted to become a skilled hacker in the field of website hacking, I would familiar myself with the languages which power websites. Some examples of this would be PHP, SQL, HTML, CSS, Javascript, CGI, JSP, ColdFusion, Python, you name it.
This is a principle which goes for all hacking sections. Learn the languages, learn to hack. Learn how they function, learn how to abuse failures in such functions. I would even recommend learning the basics (or far more, being fluent in a language or two would be great as well) before even attempting to learn to hack anything.
Once you have familiarized yourself with code, move onto vulnerabilities and exploits in said field. Learn how they function. Again using a website hacking example. Every skid and his dog knows how to do an SQL injection (though most would require a guide). However, many, if not most don't know what SQL stands for let alone how the vulnerability works. Learn how it works. Learn different forms of the vulnerability.
Now you may be thinking, "But Disparity, you lecturing us telling us to learn doesn't teach us anything." Oh, but it does. You're on HackForums right now. It is the realm of both script kiddies and skilled hackers. The amount of guides both on this forum and everywhere else on the internet is tremendous.
A skilled hacker I once knew somewhat well once explained to me how being spoonfed won't help you. Having others teach you everything will be useless. He said that some teachers would teach you how to fish bit by bit, making sure you're safe and easy going all the way along. He told me that if he was to teach someone he would instead push them off the fishing boat and have them fend for themselves; learn to survive themselves.
It's a rather brutal example, there's truth in it. Don't ask to be spoonfed. I'm not here to hand you guides. I'm here to tell you to go and find them yourself and teach yourself something. Then, and only then, can you be a skilled hacker.
Ethics
Ethics, according to the Merriam-Webster Dictionary, are
Quote:rules of behavior based on ideas about what is morally good and badhttp://www.merriam-webster.com/dictionary/ethic
You may have heard the terms 'Black hat', 'Gray hat', and 'White hat'. Though this isn't directly related to learning how to become a skilled hacker, to me this is important.
Now Black hats are the hackers which do whatever for personal gain. Gray hats are those in the middle of Black hats and White hats, and White hats are those who hack for an ethical purpose. Though some would argue that White hats must abide with the law, I would disagree, as again these three types of hackers are subjective to an individual.
This is the main reason I hate those who RAT, spread malware, jack random accounts, etc. (Usually) when one is doing one of the above things it is completely at random. Thus, they are targeting a random individual. This individual could be a complete scumbag, or they could be a perfectly decent individual. It truly displays how immature and selfish those who do mass infections are for personal gain. This doesn't only go for those who waste their time with futile activities like RATing. It goes just as much for them as it does to a top notch hacker.
So, I thought I would include this little micro section.
If you want to be a skilled hacker, I recommend you take the (subjective) white hat route. Do what suits you and your ethics, you and your morals. If that means abiding by the law, great. If it means targeting scamming or illegal sites, fantastic. If that means targeting corrupt government sites, fabulous. I could care less. Do what abides with your ethics and your morals. Don't waste your time doing mass spreading and stealing from others.
Appreciation
Thank you for reading my guide. It took me quite a while to write, though I truly enjoyed every second of it. I am hoping I was able to assist at least a few of you on your journey.
Any means of thanks is appreciated.
Thank you.
Disparity 🤝
* - ImTheCookieMonster - Mar 15, 2015
Very nice guide you have here.
myself, and countless others will enjoy this thread!
Good work✌
* - Disparity - Mar 15, 2015
(Mar 15, 2015 10:09 PM)ImTheCookieMonster Wrote: Very nice guide you have here.
myself, and countless others will enjoy this thread!
Good work✌
Thanks for the kind words. Spent a long time writing this, so I really hope it helps a few users out. 🤝
* - Raz3r - Mar 16, 2015
Very nice thread, op. I can see you put a lot of work into it.
* - balvant baldaniya - Mar 16, 2015
nice..... man..... good for beginners......
* - hahdbwoannniabs - Mar 16, 2015
(Mar 15, 2015 08:29 PM)Disparity Wrote: According to the Merriam Webster Dictionary, a hacker is
http://www.merriam-webster.com/dictionary/hacker
[/align][/font]
[font=Courier]
Now in a way this is somewhat subjective to an individual. I personally despise RATing and find those who do it pathetic. As unfortunate as it is to say, it is by definition hacking. However, I am not going to waste either your nor my time explaining how to do things like that here. Nothing even remotely similar to it either. I repeat.
Why is it such a common misconception that when someone talks about a "hacker" they automatically think of breaking into computers? I don't care what the dictionary says, a hacker is someone with an innovative and creative mind that finds ways to manipulate things without actually breaking the rules.
(Mar 15, 2015 08:29 PM)Disparity Wrote:
- Website Hacking
- Network Hacking
- Operating Systems
- Server Hacking
- Skiddy Activities
Huh? Why did you separate OS and Server Hacking? Servers are computers that have an operating system.
(Mar 15, 2015 08:29 PM)Disparity Wrote: OS Hacking is technically related to malware. However, it is directly connected to all other sections as Operating Systems allow us to connect to the other sectors.
Why would OS hacking be "technically" related to malware? Malware doesn't exploit anything, it's a post exploitation step. Dropping malware everywhere isn't hacking unless you choose to believe that bullshit definition of a "hacker."
(Mar 15, 2015 08:29 PM)Disparity Wrote: If you want to be a skilled hacker, I recommend you take the (subjective) white hat route. Do what suits you and your ethics, you and your morals. If that means abiding by the law, great. If it means targeting scamming or illegal sites, fantastic. If that means targeting corrupt government sites, fabulous. I could care less. Do what abides with your ethics and your morals. Don't waste your time doing mass spreading and stealing from others.
If you think white hats are more skilled than black hats, you obviously haven't met very many black hats.
I just thought I'd point out some flaws, constructive criticism. I can tell you put effort into this.
I give it a 7/10
* - Th3PonyWizard - Mar 16, 2015
(Mar 16, 2015 05:42 AM)0x0c0c0c0c Wrote: Huh? Why did you separate OS and Server Hacking? Servers are computers that have an operating systemI do that too sometimes. When people refer to server exploitation, they talk about escalating website exploitation into the filesystem / exploit web services or generally services on the networking layers. I refer to "OS" exploitation as lower-level exploitation. Could be malformed terminology but it's much more understandable.
* - Disparity - Mar 17, 2015
(Mar 16, 2015 05:42 AM)0x0c0c0c0c Wrote: Why is it such a common misconception that when someone talks about a "hacker" they automatically think of breaking into computers? I don't care what the dictionary says, a hacker is someone with an innovative and creative mind that finds ways to manipulate things without actually breaking the rules.
Huh? Why did you separate OS and Server Hacking? Servers are computers that have an operating system.
Why would OS hacking be "technically" related to malware? Malware doesn't exploit anything, it's a post exploitation step. Dropping malware everywhere isn't hacking unless you choose to believe that bullshit definition of a "hacker."
If you think white hats are more skilled than black hats, you obviously haven't met very many black hats.
I just thought I'd point out some flaws, constructive criticism. I can tell you put effort into this.
I give it a 7/10
1. In response to the first bit, one would think that since we are on a computer hacking forum it would be safe to make the assumption I am talking about computer hackers. Other than that, I don't really see what you're trying to say.
2. I meant more-so run of the mill regular user used operating systems.
3. "Technically".
4. I never said that. I've met more black hats than white hats, including many of the top blackhats.
Thank you for the criticism. When I get the time I may edit it to make it make a little more sense.
(Mar 16, 2015 07:03 AM)Th3PonyWizard Wrote: I do that too sometimes. When people refer to server exploitation, they talk about escalating website exploitation into the filesystem / exploit web services or generally services on the networking layers. I refer to "OS" exploitation as lower-level exploitation. Could be malformed terminology but it's much more understandable.
Exactly. When I say 'OS Hacking" I am talking about your everyday user used operating system exploitation.
(Mar 16, 2015 04:33 AM)Ɓeyond Wrote: Very nice thread, op. I can see you put a lot of work into it.
Thank you very much. I did put a lot of work into it.
* - Obimoto - Mar 18, 2015
Very legit OP...
Good information and well written...
Goes into just enough detail to help beginners get an idea of the subject, while avoiding the loss of interest with too much information...
Keep up the good work!
I may even put this in my beginner's reference list...
Oh, and love the sig! XD
* - Emily Brontë - Mar 18, 2015
As a beginner to website hacking, I found that section informative, and will begin studying those other exploits. Thank you for this OP 🤝
* - Disparity - Mar 18, 2015
(Mar 18, 2015 10:58 AM)Obimoto Wrote: Very legit OP...
Good information and well written...
Goes into just enough detail to help beginners get an idea of the subject, while avoiding the loss of interest with too much information...
Keep up the good work!
I may even put this in my beginner's reference list...
Oh, and love the sig! XD
Thank you very much, and it would mean loads if you added it to your thread.
And I know right? The sig is pretty nice. ✌
* - uid=2656239 - Mar 18, 2015
Join VipHackForums.net
Hey hey guys :)
Join Vip Hack Forums.
We ban the scammers permanently, we have Legion group we have so much more features than HF!
You can advertise your service, sell your HF account and more.
Join us!
www.viphackforums.net ( Copy paste it in your browser! )
* - uid=2656239 - Mar 18, 2015
Join VipHackForums.net
Hey hey guys :)
Join Vip Hack Forums.
We ban the scammers permanently, we have Legion group we have so much more features than HF!
You can advertise your service, sell your HF account and more.
Join us!
www.viphackforums.net ( Copy paste it in your browser! )
* - Billie Joe Armstrong - Mar 19, 2015
Nice guide for beginners, mate!
I can say im not so pro or a beginner. :P
Btw some skilled-hacker also do skid activities
* - Original™ - Mar 19, 2015
Nice guide. Definitely something anyone starting out in the field should read.