Quote:“Come,” he replied, “and you will see.”
So they went and saw . . .
- John 1:39
~ to be continued ~
This is not meant to be a perfect guide for you. If you really want to learn how to "be" a hacker, you will have to read a lot and not just this! THIS is only a summary with a lot of links, where you can gain more knowledge.
1 prologue √
2 about the thread √
3 "The hacker"
|_ 3.1 the terminologie hacker, by Cyber-Security √
|_ 3.2 three classifications of hackers √
|_ 3.3 HACKER’S PROFILE, by vladimirzec √
4 hacker ethnic
|_ 4.1 the Hacker's Manifesto, by +++The Mentor+++ √
5 Operating Systems
|_ Windows
|__ <= Windows XP
|__ Windows 7
|__ Windows 8
|_ Mac
|__ ???
|_ Linux
|__ Ubuntu
|__ openSUSE
6 Networking
|_ OSI-Layer
|_ TCP/IP-Protocoll
|_ common Protocolls
|__ HTTP
|__ SMTP
|__ POP3
|__ IMAP
|__ FTP
|__ SSL
5 Programming
|_ Programming Languages
|__ C
|__ C++
|__ C#
|__ Visual Basic
|__ Delphi
|__ AutoIt
|__ Lua
|__ ASM
|__ Java
|__ PHP
|__ Python
|__ Perl
6 Hacking
|_ 6.1 Web based hacking
|__ 6.1.1 SQLi
|__ 6.1.2 LFI
|__ 6.1.3 XSS
|_ 6.2 "Personal Hacking"
|__ 6.2.1 Keylogger
|__ 6.2.2 Stealer
|__ 6.2.3 RAT
|_ 6.3 Other stuff √
|__ 6.3.1 DoS √
|___ 6.3.1.1 LOIC
|___ 6.3.1.2 DDoS √
|____ 6.3.1.2.1 Stresser √
|__ 6.3.1.2.1.1 A list of available Stresser, by Xecuter Coding √
|____ 6.3.1.2.2 Booter √
7 Anonymity
|_ VPN (=Virtual Private Network)
|_ Proxy
|__ Web-Proxy
|__ Socks5
8 Security & Encryption
|_ Hashes
|__ Password Portection with Hashes
|__ Different Hash types
|___ MD5
9 Social Engineering
10 movies
|_ 10.1 password:swordfish √
|_ 10.2 matrix trilogie √
|_ hackers
|_ hackers 2 - operation takedown
11 (audio-)books
|_ little brother, by Cory Doctorow
|_ 1984, by George Orwell
12 Changelog
1 prologue
Everyday people join hackforums, in order to "start" being a hacker, gain more knowledge or looking for detailed knowledge. most of them are beginners; some of them are skids, who just want to hack something. they guess, there's a tool for every thing you wanna hack. just enter ip, press hack and it's done. But that's not the way it works, ... actually most of the time ;-)
The other one's wanna learn ... they use the same tool, but learning is the important difference. They want to understand, why things work the way they do, why you can do so and ... basically they're just looking for ... don't know. Depends on you; maybe you are looking for yourself;who you are, for truth, for power ... I won't mind, I just want you to tell you what helped me to get deeper into hacking.
I know that im not at the end of hacking knowledge; just one thing, you will never manage to "finish", but it's not about that. This shows you things I was interested in and what helped me ... so feel free to stay, read and learn something.
If you enjoy, feel free to leave a comment.
if you want to add somehting, feel free to leave a comment.
If you say sth. is wrong, feel free to leave a comment.
2 about the thread
as mentioned above this will mainly show things I found important, but i also want to show you the whole "universe" of hacking. There will be some definition, quotes from other tutorials (i give credits! if i forgot, comment or pn pls), video tutorials, and lots of other stuff. But remember that this is just my opinion, so pls read other tutorials too. The more the merrier. And ahh .. i got an addiction for quotes from all different persons, times and categories. But enaugh for now, lets get into it ;-)
3 "The hacker"
"Hacker" is a word, which is often used and can be realted to so many things. this chapter will be all about hacker, what he does, which types exist, a psychological profile and much more.
3.1 the terminologie hacker
i want to start with the terminologie "hacker". you find tons of different interpretation and definitions, due to the different sections you can relate it to. In general a hacker is a person who changes the circumstances for his convenience. But you can also realte it to computer security, then it's a person who ...
Wikipedia:
Quote:a hacker is someone who seeks and exploits weaknesses in a computer system or computer networkhttp://en.wikipedia.org/wiki/Hacker_%28c...ecurity%29
Urban Dictionary:
Quote:A person skilled with the use of computers that uses his talents to gain knowledge. Tere are three classifications of hackers: [...]http://www.urbandictionary.com/define.php?term=hacker
Dictionary.Reference:
Quote:[...]Computer Slang.http://dictionary.reference.com/browse/hacker
a. a computer enthusiast.
b. a microcomputer user who attempts to gain unauthorized access to proprietary computer systems. [...]
3.2 three classifications of hackers
as mentioned in the whole urban dictionary article, there are basically three classifications of hackers:
the white hat:
Quote:White Hat Hackers are the "Angels" of hacking. They are mainly know as "Ethical Hackers." Ethical Hacking is an actual career in the world today. To be a White Hat Hacker you must be certified. They hack for good, not for bad. They perform tests on security by using certified methods that would be illegal if used in the hands of a Black Hat Hacker. This side opposes Black Hat Hackers. This side may be small, but it is still powerful. White Hat Hackers are becoming an increasing threat to Black Hat Hackers. White Hat Hackers usually work in groups. They are very sucessful because they understand what they're trying to fix (because they have experience with the problem). Other names for White Hat Hackers include "Cyber-Gods and Hacking-Angels."
the grey hat:
Quote:Grey Hat Hackers are both good and bad. They do bad hackingHehe for malicious reasons and good hacking as well.Biggrin They help and harm. Many people are Grey Hat Hackers. They are barely any other names for Grey Hat Hackers. They are just "typical" hackers but still potential threats.
the black hat:
Quote:A Black Hat Hacker (also known as a cracker) is someone who hacks without authorazation or permission. Black Hat Hackers are usually solitary, even though some work in groups. As a team, they can be deadly. Black Hat Hackers usually D-DOS websites in groups. There methods can include Vandalism, Identity Theft, Site Defacing, and other Illegal Techniques. Names for Black Hat Hackers include things like"Cyber-Demons."
Away from that three basic classification there are also sub-categories, some of them can relate to all 3 classifications mentioned above:
Quote:- Elite Hacker: A rank meant to describe the the most skilled of hackers. New hacking methods are usually known be these hackers first.
Script Kiddie: A rank that describes a hacker that uses tools made by others and understand little about true hacking.
- Neophyte: A rank that describes a person that is new to hacking and has no experience with hacking and/or technology.
- Hacktivist: This is really not a rank to be proud of. It is a name very closely related to "Terrorist." Hacktivists are people who hack to get a message out about religion, ideaology, and political message. These types of hackers usually D-DOS websites to get there message out.
- Green Hat Hackers: Hackers who hack to make money. They do not worry about if their methods are legal or illegal, they just hack for a client to make Money.
(Taken from a thread of Cyber-Security:
https://hackforums.net/showthread.php?tid=1054651
there are lots of definitions here but they are all roughly the same.)
So as you see there are a lot of different "hackers"; but it's important that you can choose to which you want to belong. At the beginning I could not identify with one of them, and i'm still not sure what i am or what i wanna be. but at the moment, i think im a grey hat Non elite hacker ^^
3.3 HACKER’S PROFILE, by vladimirzec
now we come to a point that i am very interested in: psychologie. hackforums once had a social engineering section, where people posted stuff about psychologie too. But it got deleted ... but thats not what this is gonna be about. its about the profile of an archetype of a hacker. this is just an average of "the hacker", so it must not all belog to you!
it's hard to quote from this post, because it lists basic features of a hacker. So if you are interested in it, check it out here:
https://hackforums.net/showthread.php?tid=518279c
4 hacker ethnic
In this chapter it will all be about ethnic, why hackers do what they do and why. I hope you can identify yourself ... well, i did :)
4.1 the Hacker's Manifesto, by +++The Mentor+++
A text that I was exremely fascinated by was "the Hacker's Manifesto" published in 1986 (!) and ... i could totally identify with the author .. i felt so amazed that there are/were people out there that feel as i feel ... i'm still fascinated .. :o
I'll quote the beginning, i advise you to read on ;-)
Quote:Another one got caught today, it's all over the papers. "Teenagerhttp://www.phrack.org/issues.html?issue=7&id=3&mode=txt
Arrested in Computer Crime Scandal", "Hacker Arrested after Bank Tampering"...
Damn kids. They're all alike.
But did you, in your three-piece psychology and 1950's technobrain,
ever take a look behind the eyes of the hacker? Did you ever wonder what
made him tick, what forces shaped him, what may have molded him?
I am a hacker, enter my world...
6 Hacking
This section will all be about Hacking, have fun; so here we go :D
6.3 Other stuff
This section contains stuff, that I can classify to the upper parts.
6.3.1 DoS
DoS(=Denial of Service) is the attempt to make a server(website,gameserver,...) or user connection unavailable due to the incompetence of the server to handle all the packages.
DoS are often used to blackmail organisations (any questions to this topic are forbidden at hf!) or to "demonstrate" for something like Anonymous did. Or just for fun to shutdown a server.
There are alwyse two persons involved in a DoS, the guy who attacks the server and the owner of the server. A DoS is only working if your internetconnection is higher then the one of your victim.
In reality this is will rarely happen ^^ So there is also DDoS ...
Remember that your IP will be logged at the server and DoS is claimed illegal in some countries. (DoS with a proxy is too slow!)
The wikipedia article:
http://en.wikipedia.org/wiki/DoS
6.3.1.1 LOIC
LOIC(=Low Orbit Ion Cannon) is a tool designed for testing the power of a server. But Anonymous used it to attack servers (some of you may still remember this, the discussion was about wikileaks and stuff).
But LOIC will only work properly if you have tons of people who participate. But rememeber, the server owner still knows all the IPs.
LOIC at sourceforge.net:
http://sourceforge.net/projects/loic/
6.3.1.2 DDoS
DDoS stands for distributed-denial-of-service. so it's almost the same as a DoS, but with a lot more computers involved who attack.
So there might be around 2k computers who attack one server, and this will make it possible to shutdown a server.
But the server will only be offline for the time of the DDoS, after that everything will be normal.
6.3.1.2.1 Stresser
A Stresser is a service some websites offer. You can test how much your server is able to cope with. Those services are often paid, although there are some weak free booters as well.
The server gets the command, which includes ip,port,method and time (often under 1 min). This command will we forwarded to DoS-shells, which are placed on other servers. Those are the one who attack!
So the server owner doesnt get your IP, only the one from the servers who offer the DoS-shells. But it's still possible to get your IP, so better use a proxy.
How ? It's pretty easy: the person could accuse "you", then they get the logs of the servers, which own the shell. the will lead to the stresser website, which have your Ip.
your fucked xD
6.3.1.2.1.1 A list of available Stresser, by Xecuter Coding
This post contains a list of all common Stresser, which can be found at Hackforums.
Thanks to Xecuter Coding.
https://hackforums.net/showthread.php?tid=3523233
6.3.1.2.2 Booter
A Booter has the same functions as a Stresser, but is used for illegal stuff. (attacking servers which you dont own)
10 movies
In this chapter I will just name some movies that inspired me and I really liked and felt connected to. This does NOT mean that you should like them. It's just my opinion, take a look at the trailer if you are interested if not, just skip.
And i know, that there are a lot of mistakes made in such movies, but we should not break it down to this level.
10.1 swordfish
This is actually one of my favourite movies! The plot it awesome, the characters perfectly played and cut, camera orientation .. it's all just .. wow.
It's so mindfreaking, I watched it in turn! It also belongs to the Heist-movie section.
the plot:
It centers around Stanley Jobson, an ex-con computer hacker who is targeted for recruitment into a bank robbery conspiracy because of his formidable hacking skills. It's well known for it's plot twist.
famous actors:
John Travolta, Hugh Jackman, Halle Berry
trailer:
http://www.youtube.com/watch?v=0sXOKkfLN48
10.2 matrix trilogie
That movie is so fucking awesome. I hope you have heard of it, if not shame on you !
It's a science fiction media fanchise created by the Wachowski brothers and distributed by Warner Bros. Pictures.
The trilogie began with "the matrix"(1999) followed by "the matrix reloaded"(2003) and last but not least: "the matrix revolutions"(2003).
They used one of the best effectstechniques which were possible at this time. So it still looks fuckin awesome, although its that "old".
fanmade Trailer for the whole Matrix Trilogie:
(care: spoiler alert !)
http://www.youtube.com/watch?v=cCk82oMBGF8
famous actors:
Keanu Reeves, Laurence Fishburne, Carrie-Anne Moss
The Matrix:
Quote:It depicts a dystopian future in which reality as perceived by most humans is actually a simulated reality called "the Matrix", created by sentient machines to subdue the human population, while their bodies' heat and electrical activity are used as an energy source. Computer programmer "Neo" learns this truth and is drawn into a rebellion against the machines, which involves other people who have been freed from the "dream world".https://en.wikipedia.org/wiki/The_Matrix
by the way: the programm Trinity uses exists and is called n-map
Trailer:
http://www.youtube.com/watch?v=m8e-FF8MsqU
The Matrix Reloaded:
https://en.wikipedia.org/wiki/The_Matrix_Reloaded
Trailer:
http://www.youtube.com/watch?v=iFJgZ8vkGc0
Matrix Revolutions:
https://en.wikipedia.org/wiki/The_Matrix_Revolutions
Trailer:
http://www.youtube.com/watch?v=Kw3IQpnVtvo
12 Changelog
05.06.2013 created Changelog section
articles: Dos/DDoS/Booter/Stresser
--
