Jun 5, 2011 07:48 AM
(This post was last modified: Jul 19, 2011 12:05 PM by Moralitas.)
Basics
What is Hacking?
Hacking is usually misinterpreted as a something bad related to cyber crime. Hacking is the practice of modifying the features of a system, in order to accomplish a goal outside of the creator's original purpose. This guide will be based on computer hacking. For more click here.
What's a Hacker?
The person who is consistently engaging in hacking activities, and has accepted hacking as a lifestyle and philosophy of their choice, is called a hacker. A hacker tries to learn about how the system works and how to make it do things it was not made to do, or you have not got the privileges to do. There are three kind of hackers; White Hat, Black Hat, and Grey Hat. - A White Hat hacker is someone who hacks the system for ethical/legal reasons.
- A Black Hat hacker is someone who hacks the system for malicious reasons, or personal gain. These are the type of hackers media usually give attention to, which is pretty unfair.
- A Grey Hat hacker is a combination of both White Hat, and Black Hat. An example of this would be hacking Sony, notifying the administrator about the exploit, and than asking a small fee for the fix.
By default, a hacker is White Hat, and a cracker is black hat.
How does one become a hacker?
First decide if you want to be a White Hat, or a Black Hat hacker. From there you can start reading tutorials, or if you know someone that can teach you, try asking him for being your 'master'. I found the following poem on WhatIsHacking, and thought I'd add.
- To follow the path:
look to the master,
follow the master,
walk with the master,
see through the master,
become the master.
Finding someone to teach you the path is pretty hard, not many people want to spend their time teaching people about things that can be self-learned. The best thing would be to read tutorials, watch videos, and join forums related to your type of hacking. There are groups like for example HJT on HF, that teach people hacking related things. Of course you have to find one that suits the type of hacking your interested in. Click here for a list of some of the top tutorials.
First programming language
A good hacker must know how the box works before messing with it. In my opinion, choosing your first language is not very important. Your first language shouldn't have have complex syntax, meaning it should be really basic because your still learning how to program. Starting with languages like Java, and C++ is not recommended because they are for 'intermediate' programmers. It's not to say YOU MUST NOT pick these, but you should really start with basic languages. Pascal, Visual Basic, and Turing are great for educational purposes. Visual Basic has tons of tutorials on the web. Once again, there is no best programming language. Some are good for doing X, others for Y. Once you learn a language, you can start off with one that you wish to work on, it'll be almost the same thing, but different syntax.
Recommendations
Get Unix based operating systems! Good ones would be those with the Linux kernel, but it's up to you. Sure Windows is easy to work with, but it's not open source! Unless you get open source windows🤫, you should try an OS where you can do your own big things.
Think outside the box, a hacker should know alternate ways.
Join communities, this is very helpful! If you join communities, you generally tend to be up-to-date with technology. Communities can help you gain knowledge, and the other way around.
Glossary for Hacking & Cracking
Back door - A 'door' left by the original designer for tech malicious, or non-malicious purposes.
Botnet - A network of infected computers.
Crypters- Tools used to encrypt programs.
DDoS - Short for Distributed Denial-of-service attack. Pretty much a large DoS attack.
Dos - Denial of Service attack; An attempt to take down site, or a computer by flooding the bandwidth or limiting resources.
E-Whore - Pretend to be a girl, and use it to lure perverts for their money.
FUD- Fully Undetectable by Anti virus.
Hacktivist - Hacker + Activist; Someone that hacks because they want social, political, economic, or environmental change.
Anonymous would be an example.
LOIC - Short for Low Orbit Ion Cannon; Used for DOS or DDoS attacks, gives an IRC operator temp access to your computer.
Key logger - Software designed to record keystrokes.
Malware - Short for malicious software.
Phishing - Art of fooling people on entering information on a look-alike website. All phishing discussion is banned on HF.
Phreaking - Art of hacking telecommunication systems.
Proxy - Stores, and forwards cache. When using a proxy, the cache is sent to that proxy server, and from there to you. There are different kind of proxies.
Skid - Short for Script kiddie, and refers to someone that uses programs made by another person to do stuff.
Social Engineering - Getting information by talking them into it, or making them believe something.
Stealers- These focus on stealing stored Passwords on a victims computer.
SQL Injection - Vulnerability which allows you to create SQL queries.
Trojan horse - Does nasty things after execution. Basically gives backdoor access to the creator.
TV - Short for TeamViewer; An example of RAT that requires a user to type in other user's ID, and pass.
RAT - Short for Remote Administrative Tool. Used to remotely manage computers.
UD - Undetectable by Anti virus.
VPN - Short for Virtual private network; Secure way of connecting to private LANS by Encrypting the data packets.
Worm - Self replicating malicious software that uses a Computer Network to spread.
XSS - Short for Cross Site Scripting. A form of vulnerability that allows you to inject web pages.
Zombie - An infected computer.
Will add more when I think of them, post below if I forgot any. Thanks Paranaio for reminding most of these names.
Frequently asked Questions
Q: I know someone's IP can I use it to get access to his computer?
Not unless you know how to use Metasploit, and related tools. Even these fail mostly. here's a tutorial.
Q: How do I crack a WEP encryption?
The amount of videos, and tutorials available for this are unbelievable. Search.
Q: Can do I hack a Facebook password?
It's possible, but not easy. You can Social Engineer the target and get information, and use the information to reset the password. Alternates would be keylogging.
Q: What's a good language to start?
Visual Basic is great for educational purposes. Once you learn the main concepts of programming, learning other languages won't be a problem because it's usually just the syntax. Turing is another basic language for educational purposes.
I'm a human after all, I make mistakes. If you notice something that shouldn't be there, PM me. If you have suggests for FAQ let me know.
"Q: I know someone's IP can I use it to get access to his computer?
No."
Bullshit, If they're running on an unpatched win XP SP1 or something, I'm sure metasploit has over 9000 exploits. Your generalizing because metasploit almost never works.
(Jun 5, 2011 07:48 AM)Moralitas Wrote: Glossary for Hacking & Cracking
DDoS - Short for Denial-of-service attack; An attempt to take down site, or a computer by flooding the bandwidth or resources.
Hacktivist - Hacker + Acticist; Someone that hacks because they want social, political, economic, or environmental change. Anonymous would be an example.
Just saying
DDoS- Distributed Denial Of Service
DoS- Denial of Service
#2
Hacktivist - Hacker + Activist;
My point, I guess, is that you can be that person. Everyone has a dark moon, be the astronaut. You have the potential to be a greater person than you might possibly imagine.
Philsho
Good work mate, interesting read.
Sidi0u5
Jun 5, 2011 07:52 AM
(This post was last modified: Jun 5, 2011 07:58 AM by Moralitas.)
(Jun 5, 2011 07:49 AM)Trance™ Wrote: "Q: I know someone's IP can I use it to get access to his computer?
No."
Bullshit, If they're running on an unpatched win XP SP1 or something, I'm sure metasploit has over 9000 exploits. Your generalizing because metasploit almost never works. How do you determine if they're using 'unpatched win XP SP1 or something' via the IP. As for the Metasploit, someone asking this question in this section probably doesn't know how to use it, but i'll edit it though, like I said I make mistakes.
(Jun 5, 2011 07:52 AM)+Pirate Wrote: DDoS- Distributed Denial Of Service
DoS- Denial of Service
#2
Hacktivist - Hacker + Activist; Thanks, I can't believe I missed the DoS one since when creating this, someone asked me a question about these two. o.o
(Jun 5, 2011 07:52 AM)Moralitas Wrote: How do you determine if they're using 'unpatched win XP SP1 or something' via the IP. As for the Metasploit, someone asking this question in this section probably doesn't know how to use it, but i'll edit it though, like I said I make mistakes.
Okay, I remember the tutorial that a staff member put of hacking a computer with only the ip via metasploit, using nmap and the db_autopwn command. Problem is, that most patched computers are not exploitable.
And metasploit is a pretty easy tool. It's like the havij of non SQLi tools.
(Jun 5, 2011 07:55 AM)Trance™ Wrote: Okay, I remember the tutorial that a staff member put of hacking a computer with only the ip via metasploit, using nmap and the db_autopwn command. Problem is, that most patched computers are not exploitable.
And metasploit is a pretty easy tool. It's like the havij of non SQLi tools.
Pretty sure that was Vince.
Nice read though, Peter.
Another High Quality thread. This will be very helpful for the newcomers. :)
Also, for the section on White hat hackers...
From Wikipedia Wrote:The term "white hat"refers to an ethical hacker, or a computer security expert, who specializes in penetration testing and in other testing
I thought white hats tried to help people, by testing out securities, and helping people get rid of malware; etc
My point, I guess, is that you can be that person. Everyone has a dark moon, be the astronaut. You have the potential to be a greater person than you might possibly imagine.
Philsho
(Jun 5, 2011 07:56 AM)Sky- Wrote: Pretty sure that was Vince.
Nice read though, Peter.
Yeah, it was Vince. Link to that tutorial if you can.
(Jun 5, 2011 07:55 AM)Trance™ Wrote: Okay, I remember the tutorial that a staff member put of hacking a computer with only the ip via metasploit, using nmap and the db_autopwn command. Problem is, that most patched computers are not exploitable.
And metasploit is a pretty easy tool. It's like the havij of non SQLi tools. Yeah it was Tony.
Paranoia™ White Hat hacker also do penetration testings, they don't need to just help people.
(Jun 5, 2011 07:59 AM)Trance™ Wrote: Yeah, it was Vince. Link to that tutorial if you can.
https://hackforums.net/showthread.php?tid=1120351
That one?
PM'd you some more stuff that you can add
My point, I guess, is that you can be that person. Everyone has a dark moon, be the astronaut. You have the potential to be a greater person than you might possibly imagine.
Philsho
Thanks for detail Information,nice thread.
Jun 5, 2011 08:54 AM
(This post was last modified: Jun 5, 2011 09:02 AM by +Pirate.)
Proxy's?
VPN's? (Or VPN's for short) are used...
Socks?
TV-Team Viewer. A program that lets two people look at the same computer screen. EXTREMELY useful when trying to help out people, and can be cut of instantly, if a user suspects foul play.
My point, I guess, is that you can be that person. Everyone has a dark moon, be the astronaut. You have the potential to be a greater person than you might possibly imagine.
Philsho
|