DO NOT DEAL WITH THIS MEMBER
[img]http://sadpanda.us/images/1845387-W76L1JO.png[/img]
Welcome to the official Innovation hacking help desk!
You can ask any question correlating to Hacking, Pentesting, or Cracking on this thread and it will be answered by an official member of the group Innovation. Good luck to you all!
Merry Christmas!
I am here to help if anyone seeks assistance.
Kind Regards, Craze
Okay I'm begining in pentration testing. I'm taking this learning experince in layers. I am learning about Debian GNU/Lunix OS's more and more. After this what do you think I should start learning next to get a further grasp of finding exploits and exploiting. I am planning to be a security expert and I am very dedicated. I really try my best. I bought a windows VPS. My plan was to install a vuln program and exploit it. Am I taking the proper steps?
DO NOT DEAL WITH THIS MEMBER
Well, it depends on what kind of security field you want to go into. If you want to go into Web Security then you should start learning about the background of SQL injections, why they work, and how to fix the vulnerability.
If you would like to go into the computer security field then you are taking the proper steps, keep doing what your doing.
Dec 22, 2013 06:22 PM
(This post was last modified: Dec 22, 2013 06:22 PM by WealthyHustler.)
I am wanting to go into computer security. Thanks man. Maybe if I get good I can refer back to this post and be with innovation :P
Nice thread, quick 2 questions.... What port do I use when im ddos' ing somebody using a UDP attack?
2nd Question: (VPN: https://hackforums.net/showthread.php?tid=3288623) How do I setup this VPN? Like will I, myself have to manualy portforward? If so, how?
(Dec 22, 2013 06:32 PM)MrDarkrai Wrote: Nice thread, quick 2 questions.... What port do I use when im ddos' ing somebody using a UDP attack?
2nd Question: (VPN: https://hackforums.net/showthread.php?tid=3288623) How do I setup this VPN? Like will I, myself have to manualy portforward? If so, how?
Any port should suffice since It's a Layer 4 attack. The typical port is Port 80 TCP HTTP because it's always "open" which doesn't make sense because UDP can pass through open and closed ports.
Setting up a VPN is easy, usually, all you do is download the program and it'll do the configuration for you, however, if you're on a *nix distro, you'll most likely have to configure the VPN yourself, although you can set up PPTP VPN's in your network settings. But OpenVPN should be configured via command line, it's not hard at all. There's plenty of tutorials out there.
(Dec 22, 2013 06:22 PM)WealthyHustler Wrote: I am wanting to go into computer security. Thanks man. Maybe if I get good I can refer back to this post and be with innovation :P
Do you happen to possess any knowledge in computer programming?
If you want to get involved in pentesting and security I suggest learning the following:
Python
Perl
C
Java
ASM
Not all obviously, but 2 would be good(I'd start off with Python, the syntax isn't complex, and it's a fun language to learn and it's extremely powerful)
Learn about firewalls, how they work, same goes for IDSes, learn how to evade these security measures with various tactics(Just to name a few: Polymorphic Shellcode with XORed Values, Encrypting packets into Unicode, Sending packets out of order so the IDS cannot reassemble them to determine if it's malicious or not, fragmenting packets over multiple headers)
Also learn about the different types of Operating Systems out there, when you join the field of pentesting, not every box you'll attempt to exploit will be the same kind, which just means more fun for you
Vouch, Sl0w is a HQ user and is very helpful around the community. Post anything that you may need help with
Ok thanks for the reply, when ddos' ing, how do I stay anonymous? like when someone tries to trace the packets back on the router log to see who ddos'ed them, it doesnt show me. Use a VPN correct? just connect then start ddos' ing, then when ur done, dissconnect from the VPN?
(Dec 22, 2013 06:56 PM)MrDarkrai Wrote: Ok thanks for the reply, when ddos' ing, how do I stay anonymous? like when someone tries to trace the packets back on the router log to see who ddos'ed them, it doesnt show me. Use a VPN correct? just connect then start ddos' ing, then when ur done, dissconnect from the VPN?
The packets that are being sent are most likely spoofed anyway, so you're fine for that. I'd only use a VPN incase someone hacks the website(since most stressers these days use the same source code for their project, which has been exploited tons of times before) and dumps all the IP's.
But yes, a VPN would be fine, but that doesn't mean your safe.
Ok, so I can use spoofed UDP attacks and a VPN at the same though correct? and what do you mean by ur not rly safe though?
DO NOT DEAL WITH THIS MEMBER
Dec 22, 2013 07:14 PM
(This post was last modified: Dec 22, 2013 07:20 PM by Niggz.)
(Dec 22, 2013 06:56 PM)MrDarkrai Wrote: Ok thanks for the reply, when ddos' ing, how do I stay anonymous? like when someone tries to trace the packets back on the router log to see who ddos'ed them, it doesnt show me. Use a VPN correct? just connect then start ddos' ing, then when ur done, dissconnect from the VPN?
You can stay anonymous by using a paid VPN, Un-paid VPNs leave logs. Normally you wouldn't need to, unless the stresser logs IP Addresses.
(Dec 22, 2013 07:14 PM)MrDarkrai Wrote: Ok, so I can use spoofed UDP attacks and a VPN at the same though correct? and what do you mean by ur not rly safe though?
He means that if the FBI, NSA, or some other Investigative Security company ran by the US Government hacked into the Web-Based Stresser, they would be able to get your information, even with a VPN on. It would just take them a little more time to do so.
(Dec 22, 2013 07:14 PM)MrDarkrai Wrote: Ok, so I can use spoofed UDP attacks and a VPN at the same though correct? and what do you mean by ur not rly safe though?
I mean VPN's aren't going to make you 100% anonymous.
And yes, you can.
|
![[Image: xKulkDS.gif?1]](https://i.imgur.com/xKulkDS.gif?1)
