(Apr 18, 2019 10:39 PM)shelled Wrote:  web application for bug bounties and the future of anything related to actual hacking because it'll often be an API test and the way you think will be transferable to iot testing as well

(Apr 18, 2019 10:51 PM)raggaescience Wrote:  Define "actual hacking." And yes I want to do bug bounties the most so I know one of my specialties is gonna be web hacking. My question is just is that it or how many and which additional areas do you recommend for usefulness?

(Apr 19, 2019 08:44 AM)Faith Connors Wrote:  the ones you're interested in.

/thread

1. web/database hacking
   


2. network hacking
   


3. browser hacking
   


4. hacking into an actual box (like Hack the Box, etc.)
   


5. python hacking
   


6. C++ hacking
   


7. mobile app hacking
   


8. cryptography
   


9. exploit development
   


10. other (please list)
    

(Apr 22, 2019 01:27 AM)realsunjester Wrote:  

1. web/database hacking
   


2. network hacking
   


3. browser hacking
   


4. hacking into an actual box (like Hack the Box, etc.)
   


5. python hacking
   


6. C++ hacking
   


7. mobile app hacking
   


8. cryptography
   


9. exploit development
   


10. other (please list)
    

1. you need to first understand and know how to create and maintain a database.

2. you need to know what a network is, "network hacking" isn't anything since it's just too general. a network is just a group of computers connected through a common connection. so "network hacking" is nothing more than computer hacking. maybe you mean network device hacking like routers?

3. do you mean persistent xss? i am confused about what you mean.

4. all the above (and below probably) are hacking into "actual" boxes.

5. hacking python? do you mean learning python?

6. hacking c++? do you mean learning c++ or reverse engineering c++ applications?

7. do you mean reversing java applications? almost all mobile apps are created in java.

8. cryptography isn't really a hacking thing, it's more of a use case thing.

9. you will need to know programming quite a bit, plus many different hacking techniques.

(Apr 22, 2019 09:47 AM)raggaescience Wrote:  1. I know. I'm going to build a full-stack website after I complete some IT certs.
2. WiFi hacking, moving laterally on a company's network, hacking CISCO devices, VoIP, etc.
3. exploiting Firefox or Chrome code, etc.
4. You've never heard of HTB? I mean logging in as a normal user and gaining root privileges on a device, reverse shells, etc.
5. learning python and using it to write hacking tools, exploit development, reverse engineering, etc.
6. learning c++ and using it to write hacking tools, exploit development, reverse engineering, etc.
7. No, I mean plugging the phone into the computer and exploiting code in the mobile apps. There are ways to get usernames and passwords from the GMail App. It's a real thing. Look it up.
8. Yes, wouldn't it be appropriate for a hacker to know?
9. so you would recommend being well-rounded but how do I do that and retain the skills? How well-rounded should I realistically get?

(Apr 22, 2019 11:05 AM)Faith Connors Wrote:  the more you explore the fields you selected, you'll find out their actual limitations in what you can/can't do and how similar they actually are to each other. for instance, web hacking an mobile hacking to some degree are identical for the reasons that most apps use some sort of webview or at the very least send http requests to connect to the servers on the backend. and because of that, you can theoretically do mobile hacking over wifi, ie. network hacking. and because most sites use ssl, there is some applied use of cryptography here, at least to the level that you want to try and downgrade requests to either not use any cryptographic implementation or use weaker keys to make it more easily crackable. to do that, you might write your own python script or something, using some programming knowledge. and once you find a vulnerability in the app, you'll write yourself an exploit (or a pyaload) for it, so you'll have some exploit development going on there too.

everything is connected, and everything has limitations. there's no use focusing on a field when they're all so similar. focusing on a field just means learning about all the nuances between the fields and learning how to work around (or with) them.

(Apr 22, 2019 12:44 PM)raggaescience Wrote:  Ok so how long should I spend with web hacking before I add in another area in your view?

(Apr 22, 2019 04:30 PM)Faith Connors Wrote:  however long makes you feel comfortable with what you know
for most people that becomes never, since things are always constantly changing.
but maybe you just want to learn about doing a few cool things and move onto something else so you can be more wellrounded

there's no answer that can satisfy your question.

edit:
observe the following as to why this question can't be answered:

there's a book on my desk here, introduction to philosophy: classic and contemporary readings, fourth ed. by louis p pojman and james fieser
it's about 700 pages long, filled with essays by every major or semi-famous philosopher since plato (or socrates, if you count platos works as socratic.)

i can tell you that reading this book will give you a really good introduction to the world of philsophy. that's definitely true.
then, you subsequently ask 'how long should i spend reading it?'

if you spend five minutes scanning through and saying you 'completed' it, you might have been introduced to a few concepts but have not put in any thought, as philosophy requires. same goes for reading for an hour, or two, or however long you spend.

if you simply go through the book, think about the questions posed by the book's editors (as well as the questions/subject matter of the essays,) then it'll take you way longer. but you will actually get yourself a really good foundation in terms of philosophy as a whole across millenia.

but maybe you don't want to know about medieval and modern philosophy, just sticking to the basics like aristotle, epictetus and plato. you'll spend like 10x less time getting through this section than the whole book, but your foundation on those subjects in particular will still be good, letting you move onto something else that interests you and might still be related (ie. how aquinas took aristotilian virtue to create aquinian christianity or whatever.)

it's just not a good question to ask. focus on what you like, if you don't like it move on. if you just want to scan through stuff to do it quickly, then by all means do it, but don't expect it to be as good as if you spent hours upon hours studying something.