[ykrajina_boy]

I recommend reading hacking for dummies. good book for beginners. It also has a lot of tools. One of the first hacking books i read- itly help u get started

[Pentatonic]

First of all, download a KaliLinux distribution if you're looking to become a pentester. It has a vast suite of tools which will all prove useful to you.

Second, learn C, C++, Python, and Java. NOT. JAVASCRIPT.

Java is not Javascript. Don't learn JS, it's a waste of time.

Then, I'd move onto launching remote attacks using suites like MSF, Armitage, Cobalt Strike, etc. etc. From Kali Linux.

SQLi, XSS, LFI, RFI are all small-time when it comes to attacking real websites.

What you're looking for is a vulnerability in an application which the website is running, for that I recommend going to exploit-db.

They have a list of most exploits that aren't private and you should be able to search an application and it's version if it's outdated, and find a remote exploit which will yield some kind of result.

Also, install Acunetix WVS, and run a scan of the site, it's great for finding vulnerabilies.

If you have any other issues, PM me.

Double facepalm...

-JavaScript is a waste of time?
Yes of course when the 99% of todays website use JavaScript, JS is a waste of time. Legit idea! XSS without JavaScript isn't possible.

-Second, learn C, C++, Python, and Java.
Which of these languages will help him understand the attacks behind web applications? C probably or maybe ASM? Hmmm?

[Devisual]

I recommend reading hacking for dummies. good book for beginners. It also has a lot of tools, and dont be afraid of asking people for help thats my advice. Goodluck

-Devisual

[jimi123]

If you succeed, please contact me. I need some good web database