Hello HF!
Here is very simple tutorial, how you can hack a website in few steps.
1. Learn how to code websites. You CAN´T hack a site without knowledge how it is done.
First and easy step should be HTML with CSS. Its easy language and you will be able to write your own simple site.
You can try this site: http://www.codecademy.com
Then you can move on Javscript. A little bit harder then HTML but not so hard. Again you can use [img]http://www.codecademy.com[/img].
After that, go on PHP and SQL. There you will see how the databases works and how to write your own. Learn it properly.
Use for ex. :
SQL
PHP
2. OK, now you know how the website look like, where the data is stored etc. Now you can start reading SQLI tutorials or PHP Security guides.
Remember:
If you know this:
from information_schema.tables where table_schema=database()
But you have no idea why the tables dosplay on screen, you arent a hacker.
If you copyied XSS alert from some thread, typed it to the KFC searchbar because SPIDER has find that vulnerability, and your name display, you arent a hacker.
Ask a lot, learn a lot, try a lot.
Sites what I gave as an example for learing, DOESNT cover everything.
Good luck,
CM00
Here is very simple tutorial, how you can hack a website in few steps.
1. Learn how to code websites. You CAN´T hack a site without knowledge how it is done.
First and easy step should be HTML with CSS. Its easy language and you will be able to write your own simple site.
You can try this site: http://www.codecademy.com
Then you can move on Javscript. A little bit harder then HTML but not so hard. Again you can use [img]http://www.codecademy.com[/img].
After that, go on PHP and SQL. There you will see how the databases works and how to write your own. Learn it properly.
Use for ex. :
SQL
PHP
2. OK, now you know how the website look like, where the data is stored etc. Now you can start reading SQLI tutorials or PHP Security guides.
Remember:
If you know this:
from information_schema.tables where table_schema=database()
But you have no idea why the tables dosplay on screen, you arent a hacker.
If you copyied XSS alert from some thread, typed it to the KFC searchbar because SPIDER has find that vulnerability, and your name display, you arent a hacker.
Ask a lot, learn a lot, try a lot.
Sites what I gave as an example for learing, DOESNT cover everything.
Good luck,
CM00