[Zabuza]

Hello there. HackForums is a wonderful place full of many wonderful, intelligent people in many fields. Of course, the people which HackForums attracts the most are going to be hackers, or individuals with hopes to learn how to hack. Unfortunately a very large number, if not the majority of these intrigued little hacking scholars get led in a very dark direction, which hardly benefits them at all, if at all that is. They decide to use automated tools to do things, and through that they learn little to nothing on actual Hacking. These people are usually referred to as skids which is a shortened form of script kiddies. I am not against these users by any means, but in my humble opinion it is far better to go down the road of real hacking. This thread will teach you how to do so.

I will not be covering RATing, E-whoring, or DDoSing in this guide as I do not deem these as "proper hacking methods". If what you came to HF for falls along those lines suggests that this thread won't assist you at all.

Table of Contents
- Introduction -
- Defining Hacking -
- Fields of Hacking -
- How to Hack -
- Closing -

Defining Hacking

Hacking has been defined by many things, and most people have their own opinions on what it is. I for one do not believe DDoSing is hacking, whilst I can assure you a vast majority of stresser/booter owners will assure you that it is and that it is a very vital tool for any hacker. So, I will not insist my opinion upon you, but rather give you the definition of hacking (or rather of hack, as it is the present participle of hacking).

Gain unauthorized access to data in a system or computer

Link to definition

Now of course there are multiple definitions of hacking, but I provided the definition which is related to the topic I am discussing today. Now take what you want from the definition. Maybe in your mind DDoSing is gaining unauthorized access to data in a system or computer, but in mine it is not. Now that you have (hopefully) formed an opinion on what hacking is, let's continue.

Fields of Hacking

Now there are many fields or areas of hacking. I personally specialize in Website Hacking as that is what interests me the most, thus I have studied it the most. In this chapter or section I would like to help you define what you would like to learn, or what you would like to learn first. There are three main hacking fields; Website hacking, Networking, and Systems/Servers. I will mostly be covering website hacking, but I ask that you do not let that make you click away from the thread. The basic principles of learning how to hack anything are the exact same. Besides, I'm not teaching you how to hack things, I'm teaching you how to learn.

Each field has its own lists of vulnerabilities, exploits, and tools that are used. For an example, as far as websites go there are several extremely popular vulnerabilities; SQLi, RFI, LFI, and XSS. Though some are more common than others, they are still out there. But of course there are more methods such as XFS and RCE. There are also automated tools to perform these attacks such as Havij for SQLi, as well as vulnerability scanners and website crawlers which essentially look for vulnerabilities and display web pages and directories such as Acunetix and OWASP ZAP.

How to Hack

Now of course this isn't as straight forward as this chapter's titles may suggest, especially as I won't actually be directly teaching you how to hack, but rather how to learn to hack. Now you must realize that hacking isn't straight forward and simple. Actually hacking is for the intelligent. Every time you attempt to hack something (by my standards, so not spreading malware) you are solving one massive and incredibly complex puzzle, which suggests that learning to solve these puzzles won't be the most incredibly simple thing in itself.

Now let me cover tools. Tools are helpful, and should be used to assist you. Not to do all of the work. Honestly, using tools will only help you so much. If you learn how to perform SQL injections through Havij you're volunteering to let all of the work done for you. But, will that really benefit you? Any site with decent security won't be able to be taken down by a simple tool. They need an intelligent being behind that tool. So if you are wanting to let tools do all of the work for you, if you are wanting to learn not how things work, but how to use automated software, if you are wanting to be a skid and be included in the vast majority I listed in the beginning of this thread, then please. Use those tools. Let them do everything for you. And definitely get off of this thread, because it is completely useless. There are loads of Havij tutorials for those interested. But, if you are wanting to actually learn how things work, if you are wanting to learn how to solve these complex puzzles, and if you are wanting to learn how to actually hack, then please continue, because this thread will help you.

Now I'm not saying tools are completely for skids and shouldn't be used, but they should be used to help. Not to do all of the work.

Now the fact that you are still here suggests that either you are going to use tools and are simply stubborn, or that you are actually wanting to learn how to hack. Now I recommend that you do so on every level. But, I cannot teach you everything I know here, so I will teach you how to actually learn. Here are some very helpful websites.

- https://hackforums.net (Great resource, but be careful not to be misled.)
- http://www.codecademy.com/ (Programming will certainly help you with hacking, and is good to know. This is a free resource which will teach you how to program in various languages.
- https://www.Udemy (warez disallowed).com/ (If you have money to spare then Udemy (warez disallowed) has online courses which will help you all the way from coding to basic to advanced hacking. Just be careful on which courses you buy.)
- http://google.com (Any questions? Use this.)
- https://www.owasp.org (One of the most helpful resources for website hacking.)
-https://hackforums.net/showthread.php?tid=3117173 (A training site for website hacking - credit to -Gator- for this one)

Now use these to learn. Do your own research. If you're brand new to this find vulnerabilities to study. OWASP has many for website hackers. If you're interested in servers, learn how they work and look into exploits. Same goes for networks. Honestly, no one can teach you everything. I've learnt all I know so far by teaching myself and doing research, along with the help of HF members and members of Legion. Learn how to do everything manually so that this actually benefits you. Now I know it's easier said than done, believe me. But this is how you learn. Do your own research. Be your own teacher.

Thank you for reading this. If you have any questions feel free to PM me. Note that I am not doing mentoring and I will not answer questions on mentoring. Also post in the proper section for your question. You will probably get a faster response that way.

Goodies, who is a friend of mine also has an Ebook which I have read through which would benefit those of any hacking field greatly. I would greatly recommend anyone who is interested in hacking check it out. Click me to go to the thread.

~ Dartlang, on behalf of Legion

[Nakamoto]

What a fantastic thread. More people need to learn how to learn in my opinion. People in this scene nowadays don't care for details or proper knowledge anymore, they just want to pop random boxes and brag about it online because "l0l efaM3 BRUUUU"

Before I start ranting, thanks for posting this.

[Zabuza]

DOS (And DDOS) can actually be used in hacking. It's an extremely advanced technique I'm referring to and not one I'd like to become common knowledge on HF to begin with, we'd have skids hitting anything and everything without understanding the implications of what they are doing, if you are interested, please feel free to hit me up via PM ;)

Apart from that though, absolutely fantastic thread for people starting out, hope to see some more stuff following this ;)

I never said it can't be used. But, Ddosing itself is not hacking.

[Centuries]

Looks good, I wish there was more actual teaching than site links for the new ones, but still looks good. :)

[Nakamoto]

Looks good, I wish there was more actual teaching than site links for the new ones, but still looks good. :)

At least he wasn't spoon-feeding people information. It's refreshing to see this style of teaching.

[Centuries]

At least he wasn't spoon-feeding people information. It's refreshing to see this style of teaching.

Yeah copy pasterino won't teach anything.

[digitoxx]

not really a tutorial but w/e nice job
these kind of threads should have personal experiences from different members of leejiun, those who list their different skillset in the section's teacher skillset thread, that would probably encourage people to learn if they see other experiences in different fields
also where is the turkey of tiki island, is he still dead or what

[Zabuza]

Actually it can be... I don't think I've ever seen it used as such on HF, but it definitely can...

For I believe the third time now, I never stated DDOSing cannot be used in hacking, but rather it is not hacking in itself. 🤝

---

Thank you everyone for the kind and supportive words. They mean a lot.

---

Nice tutorial Dartlang! Seen you put a few reference if you would like I compiled a site that has been pretty helpful for new members consisting of good tutorials from HF covering all the basic concepts of web application hacking. https://hackforums.net/showthread.php?tid=3117173

Keep up the good work!

Thank you very much Gator. Added it to thread.

[L5es]

All ignorant comments aside from people who most likely didn't read the thread and just aimlessly said "Nice post", I don't understand these threads. There's already so many of these threads it's getting ridiculous. If I remember correctly you already posted a thread similar to this. I'd rather see an actual tutorial on how to do something(Even if it's as outdated as RFI vulnerbilities, or as repetitive as SQL Injection) than something like this. Yes, you're pointing beginners somewhere, but if you're going to need to be spoonfed then the field isn't for you.

[Phifen]

Thanks for writing this, it helped me alot.