Jul 23, 2017 07:33 PM
(This post was last modified: Aug 2, 2017 05:45 PM by Pronouncer.)
![[Image: 2HKf63B.png]](https://i.imgur.com/2HKf63B.png)
Introduction
Thank you for your interest in our thread, we will be guiding you through the process of how to unskid yourself. Well at least what we believe is unskidding yourself. To be fair you have already taken the first step towards this process.
What is hacking?
Before we delve into the world of hacking we have to first understand what hacking is, and what its based upon. I’d like to give credit to sonder at this stage as a lot will be similar to what he has said previously.
Hacking in the dictionary meaning is
“Hacking is unauthorized intrusion into a computer or a network. The person engaged in hacking activities is generally referred to as a hacker. This hacker may alter system or security features to accomplish a goal that differs from the original purpose of the system.” That's the straight out of the book definition so what would i personally class as hacking, i would say that gaining access to a system in a non-intentional method is hacking. Why am i saying it like this? Well hacking not only is unauthorized, but most the time requires you to think outside of the box to create new methods of exploitation. You should now have a very basic understanding of what being a hacker actually entails.
Different Types of Hackers
So not every hacker is the same. You will come across in the hacking communities different forms of hackers that hack for different reasons. Take the hacking group anonymous they would be classed as grey hat hackers, whereas lizard squad would be classed as black hat. You may be thinking what do all of these different “hats” mean? Well we will be covering that in this thread.
Black hat
So what is a “Black hat” hacker, no its not a person walking around with a top hat. This is a type of hacker that is out for personal gain, this normally comes in terms of financial benefit. A blackhat hacker will often use their skillset of computing and networking knowledge to bypass authentication systems and steal data or cause data outages. This class of hackers only care about their own monetary gain.
Grey hat
So what is “Grey hat”. Well a grey hat hacker is a hacker who performs illegal activities for a good purpose. This does not in anyway make their actions legal but their cause is often clearly visible. These normally are classed as “Hacktivists” who will hack for a ethical cause, we have seen this with the email leaks of presidential candidates.
White hat
White hat hackers are the only legal form of hackers who will not face prosecution. White hat hackers are authorised to gain unauthorised access. Seems like a loop huh? Well let me explain. White hat hackers are contracted by businesses to carry out work. They sign non-disclosure contracts and their job is to gain access to the system using any method possible, write reports on it and possibly assist to fixing it.
Things you must understand before starting
This is a long term commitment and you will not be done in one day. This will take atleast 5 months to even start the process.
You will most likely give up as it's very hard to do. Dont over do yourself, take time take frequent breaks. Yes its learning but we still want it to be fun right? Doesn't matter how slow or fast you go as long as you keep a steady pace you will be good.
Organise your sources of information, this can include things such as IRC servers but mainly we are talking books. It is great to learn from people at times but their mistakes will become your mistakes. No one will hold your hand through this.
Learn how to use different google operators such as “” site:* things like that will help you find sources related to just your keyword. Don't be shy to ask for help there will be people laughing that's normal but everyone starts somewhere. Here is our helpdesk for you
https://hackforums.net/showthread.php?tid=5675878
This may sound so skiddy like every 15 year old wanna be is doing but watch convention videos they really will teach you things you never knew. My first botnet was copied from defcon which was a javascript botnet it was incredibly unstable but i was proud because i did it.
Don't do everything by yourself work with others, teach people this way you will remember it better, but don't forget keep to yourself, you are responsible for your actions no one else.
Where exactly do I start?
Start with Linux and network enumeration. Linux is 100% necessary to unskid yourself. I’m sorry but its just the truth. The truth hurts but It will set you free. Don’t think that by specializing in one single niche like windows malware development is fine but it doesn’t make you a hacker and it certainly doesn’t unskid you.
The good news is that you don't actually have to replace windows on your machine. You can just run linux
Off of a VM if you prefer. Though I will say that getting rid of windows and forcing yourself to work with linux is probably the best way to learn it quickly. I’d say ubuntu on a VM is the safest route. And once you have an understanding of using the package manager and navigating around using the terminal, you’re safe to move onto Kali and start testing some scanners on a VM like Metasploitable2 (I recommend this one because it comes with DVWA built in so you can learn software exploits and web exploits in one box) after that go check out vulnhub.com
Networking
If anyone tells you networking is not the most important thing when it comes to hacking. Ignore them they’re straight our wrong. Networking is the backbone to hacking, all systems require a network of some sorts in order to be hackable. Below is a list of topics you have to learn and i will give you what i think is the best resource out there. Take your time watch the videos and take notes on this. Its a little old but its true what they say old is gold. Here is a 29 video playlist that should set you back 2 months in time, towards learning networking.
Eli the computer guy is a very underrated source of information.
https://www.youtube.com/playlist?list=PL...1082F6F2A5
While you are checking his networking stuff when you have finished take some time to start watching these too
https://www.youtube.com/playlist?list=PL...1087E58F76
Next thing within networking once you have finished that (There will be some repeated bits)
Is to take a look at CEH revision guides and Comptia Networking study guides
CEH Playlist
https://www.youtube.com/watch?v=x8aO4iZY...zeQI9OHXtx
Comptia Net+
https://www.youtube.com/watch?v=LWJ8PHvA...xAcmKljbnQ
Networking Topics that are a MUST
https://hackforums.net/showthread.php?tid=5685028
Networking Topologies
Wan Lan Wlan
Physical and Logical Connections
Subnets
OSI Model (All layers)
Understanding Switches/Hubs
Server VS Client
Server side processing
Client side processing
TCP/IP
UDP
TCP
Common Ports
DNS Systems
Hacking DNS
Name Servers
DNS Records and Zone Files
DHCP
DHCP Client/Server Communication
The Lease Concept
DHCP Resource Exhaustion
NAT VS DHCP
Data Logging (Advantages and disadvantages)
Multi-Threading
Multi-Processing
Ipv4
Ipv6
MITM
TCP Handshake
Port scanning
IP scanning
Fingerprinting
Desktop Phishing
L7 methods (SLOWLORIS, HEAD, GET, POST)
Where to start with Programming
So I’m going to start this section off by doing exactly what I’m known for. And that is, preaching the
Good word of LINUX. Linux is absolutely best for development. It has all the best tools, the best libraries and repositories. And to top that all off, the OS itself is coded and maintained by open source devs who have development in mind.
Quote:Trying to learn to hack on a Microsoft Windows machine or under any other closed-source system is like trying to learn to dance while wearing a body cast.Another benefit of linux is that learning the command line forces you to learn about computers more which will help give you a better understanding for when you write programs. And learning bash shell syntax is actually teaching you a scripting language at the same time.
-Eric Steven Raymond
For starting off learning to code, I recommend Python because it is open source, cross compatible and its easy to learn and easy to read. Plus there are a lot of sources out there for hacking related scripts that you can read in order to get familiar with using it for “nefarious” purposes.
After that I’d go to Java or C++ Depending on your needs. Probably Java for the best cross compatibility or C++ for the most efficient small file sizes and the ability to work with lower level functions.
Website Exploitation
If website exploitation is what you are into there are a few things you will need to know right at the beginning. There is no point jumping into things without knowing this.
A basic understanding of networking (Atleast this entire playlist https://www.youtube.com/playlist?list=PL...1082F6F2A5 )
HTML
CSS
Javascript (Not to be confused with java)
PHP
SQL
HTTP (I am talking about the protocol, dont start googling HTTP language, we want to understand this protocol and what it does and how it does it)
Here are some resources:
HTML/CSS - https://www.youtube.com/watch?v=y3UH2gAhwPI
Javascript - http://eloquentjavascript.net/
PHP - https://www.codecademy.com/learn/php
SQL - https://www.codecademy.com/learn/learn-sql
HTTP - https://www.tutorialspoint.com/http/index.htm
Seems simple right, well it is to be honest give it a few months and you will know all of this from the top of your head. If you go in without this knowledge you will get lost and then lose interest.
I know it's the 21st century and all, reading has almost become redundant to most people. If you think you can go far of video tutorials alone you sir are very wrong.
Here is what i personally recommend as a book to read once you have done all of that. Yes it is paid.
https://www.amazon.co.uk/Web-Application...1118026470
There are other free books out there.

![[Image: f696d895a207ebac42106b3c766f8a1e.png]](https://i.gyazo.com/f696d895a207ebac42106b3c766f8a1e.png)



![[Image: O444cFs.jpg]](https://i.ibb.co/c2rr5jw/O444cFs.jpg)
