Jul 15, 2017 05:44 PM
(This post was last modified: Jul 15, 2017 05:45 PM by Dr. Gonzo.)
Okay so imagine for a second that you're a newbie.
You just got done watching a documentary on anonymous which has sparked your interest in the fascinating art of exploitation and system compromise.
Now your browsing history which before only consisted of cat videos and the occasional search for "hentai tentacle anal penetration" Is starting to look more like that of a hardened Internet badass™.
With phrases like "RAT", "Ddosing", "SQLi", and the most revered technique of them all; "DOXing" popping up you realize you need to go incognito so you don't get framed as one of the Russian hackers that got trump elected.
You stumble upon a legit seeming website called hackforums.net and sign up after being seduced by a plethora of fascinating tools like social media password crackers, RATs, Crypters.
All the shiny graphics draw your attention to the products and the ebooks almost fascinate you enough to buy them with their "too good to be true" promises.
But this is hackforums. Anything is possible here.
You get set up with a shiny new RAT coded in VB (the best language known to hackers), a free VPN + an account on NoIP (because nobody pays for stuff like that)
And a cheap crypter that the owner said was "probably FUD".
You decide to forget about useless command line tools like nmap and metasploit because this isn't the 90s.
Everybody knows that command lines are slow and useless and if you want to get anywhere as a hacker, you gotta blow a bunch of money on sick looking, elite GUI tools.
</satire>
Be real. If you could easily get rich RATting, cracking twitters or exploiting websites that you found via public google dorks, don't you think everyone would be doing it?
Do yourself a favor and learn how to use linux. Learn how computer networks work. Learn how to at least read code. Learn how to enumerate targets by practicing on VMs. Everything else from using exploits to privilege escalation to web app exploitation can be learned on the fly. Don't go to jail. Don't waste your time and money on bullshit. Becoming knowledgeable in the fundamentals will make you self sufficient in the long run.
(Jul 15, 2017 05:44 PM)Dr. Gonzo Wrote: Okay so imagine for a second that you're a newbie.
You just got done watching a documentary on anonymous which has sparked your interest in the fascinating art of exploitation and system compromise.
Now your browsing history which before only consisted of cat videos and the occasional search for "hentai tentacle anal penetration" Is starting to look more like that of a hardened Internet badass™.
With phrases like "RAT", "Ddosing", "SQLi", and the most revered technique of them all; "DOXing" popping up you realize you need to go incognito so you don't get framed as one of the Russian hackers that got trump elected.
You stumble upon a legit seeming website called hackforums.net and sign up after being seduced by a plethora of fascinating tools like social media password crackers, RATs, Crypters.
All the shiny graphics draw your attention to the products and the ebooks almost fascinate you enough to buy them with their "too good to be true" promises.
But this is hackforums. Anything is possible here.
You get set up with a shiny new RAT coded in VB (the best language known to hackers), a free VPN + an account on NoIP (because nobody pays for stuff like that)
And a cheap crypter that the owner said was "probably FUD".
You decide to forget about useless command line tools like nmap and metasploit because this isn't the 90s.
Everybody knows that command lines are slow and useless and if you want to get anywhere as a hacker, you gotta blow a bunch of money on sick looking, elite GUI tools.
</satire>
Be real. If you could easily get rich RATting, cracking twitters or exploiting websites that you found via public google dorks, don't you think everyone would be doing it?
Do yourself a favor and learn how to use linux. Learn how computer networks work. Learn how to at least read code. Learn how to enumerate targets by practicing on VMs. Everything else from using exploits to privilege escalation to web app exploitation can be learned on the fly. Don't go to jail. Don't waste your time and money on bullshit. Becoming knowledgeable in the fundamentals will make you self sufficient in the long run.
This is the truth that people dont want to hear. Even though they know it, they just put it aside because it takes time and effort.
Good post though
Wait I thought rats were used for white hat purposes and network administration? You're telling me I have been told lies????
(Jul 15, 2017 06:02 PM)The One Who Knocks Wrote: This is the truth that people dont want to hear. Even though they know it, they just put it aside because it takes time and effort.
Good post though essentially "Everybody wants to be successful but nobody wants to put in the work"
they just keep looking for bs shortcuts. I can guarantee you that the shortest
path from point A to point B is mastering the fundamentals.
(Jul 15, 2017 06:09 PM)SIM-3257834 Wrote: Wait I thought rats were used for white hat purposes and network administration? You're telling me I have been told lies????
They are mostly used in companies and places where you'd like to monitor the PC's.
But boy can it be used for Black Hat Activities.. Lmao
I sometimes come around and poke a few threads before leaving for a few months again.
I like your sense of humour and what you're saying. Anyways, yeah, if you waste your money, at least waste it on shitty certificates like PentesterLab ones or such, not some bullshit ebooks or software that usually can't even perform its' main function.
Reading this thread after a long and difficult day cheered me up, thank you oh great white shark. I hope this thread will open the eyes of some beginners who are new to the place.
After reading this thread ---> No change on me
Why ?
Because i am already going in right track.
Like i am learning linux from "linux fundamental ebook", python from "automate the boring stuff with python" video, networking from Udemy (warez disallowed) course.
My aim to do course OSCP and get job in Pentesting field so even i am beginner i never thought about RAT.
I will learn just basic concepts of c,ruby and assembly language atleast so that i can understand other's exploits
OSCP = Try Harder
I got to know about HF through google. I cam here and understood some of concepts which i didn't know [thanks to tony88]
Still learning and using search function of HF i got to know some vulnerability names like, sqli,xss etc and i will surely learn it too.
(Jul 16, 2017 02:36 AM)SysAdmin Wrote: They are mostly used in companies and places where you'd like to monitor the PC's.
But boy can it be used for Black Hat Activities.. Lmao I have no idea what kind of industries do this but any respectable development studio / office has a functioning IT that doesn't do stupid shit like this. Actual corporate enviroment is mostly monitored at the networking level.
(Jul 16, 2017 03:11 AM)LD_PRELOAD Wrote: I have no idea what kind of industries do this but any respectable development studio / office has a functioning IT that doesn't do stupid shit like this. Actual corporate enviroment is mostly monitored at the networking level.
I've mostly stumbled upon Schools doing this in order to monitor what the students are doing.
I sometimes come around and poke a few threads before leaving for a few months again.
(Jul 16, 2017 04:13 AM)SysAdmin Wrote: I've mostly stumbled upon Schools doing this in order to monitor what the students are doing. schools are a different story
as a worker you're not likely to see your computer actually monitored to that degree, at least in SWE
(Jul 16, 2017 04:16 AM)LD_PRELOAD Wrote: schools are a different story
as a worker you're not likely to see your computer actually monitored to that degree, at least in SWE
Depends on the country, here in Slovenia, you're lucky to see anything monitored, schools don't even block .exe file execution, let alone have RAT's. Companies do usually have IT's that oversee Network Activity, that is very much correct.
I sometimes come around and poke a few threads before leaving for a few months again.
Jul 16, 2017 10:02 AM
(This post was last modified: Jul 16, 2017 10:03 AM by Dr. Gonzo.)
(Jul 16, 2017 02:46 AM)Abducted Wrote: I like your sense of humour and what you're saying. Anyways, yeah, if you waste your money, at least waste it on shitty certificates like PentesterLab ones or such, not some bullshit ebooks or software that usually can't even perform its' main function.
Exactly, even low end certs will teach you way more than screwing around in useless niche areas of "hacking".
(Jul 16, 2017 02:53 AM)Baud Wrote: Reading this thread after a long and difficult day cheered me up, thank you oh great white shark. I hope this thread will open the eyes of some beginners who are new to the place.
I'm glad someone was able to enjoy my writing style. I've come to accept that my purpose
in this sub form is to force the uncomfortable truth down the non-consenting throats
of noobs.
Nice write up. Interesting indeed . Thanks for taking the time to write this.
OP
you made my day i'm saving this in a text document and keep this for the rest of my life i see a lot of people here trying to do that
|