[Turtle™]

This tutorial will provide an overview on the following subjects:
-What type of hacker you should be
-Types of hacking
-Website
-DDOSing
-Wireless
-Password cracking
-Viruses
-How to not get hacked
-Signs that you are getting hacked

Okay, first off, there are three types of hackers. You should choose to be one of them when you start you hacking career.

White Hat:

These hackers are the "good guys". They fight against the black hats. Being a White Hat Hacker (also known as Ethical Hacker) is actually a legitimate job. They test a companies security by trying to hack them.

Grey Hat

These guys are a combination of White and Black Hats. They help people and do bad stuff when it suits them. The majority of people are grey hat hackers

Black Hats

These guys are the bad guys. They break into people's computers, steal credit card numbers, addresses etc. They are also known as crackers. All Black Hat activity is banned on Hack forums.

TYPES OF HACKING:

WEBSITE HACKING: The two main ways of website hacking is through SQLi or XSS. SQLi is good for beginners who want to hack badly made websites by injecting codes into the url. The main objective of SQLi is to steal passwords or become the administrator.

XSS is more advanced and more websites are vulnerable to XSS than to SQLi. It is injected into the url or search boxes inside the website. XSS mainly uses Javascript and HTML

DDOSing/DOSing: Is not really "Hacking" a website. It basically is sending so many things (such as requests, packets or pings) to a website that the website lags or stops completely.
DDOS is with more than one computer. (When you have a bunch of computers under your control)
DOS is with just one and it usually doesn't work

PASSWORD CRACKING:

There are 3 common ways to crack a password.

-Brute Forcing/Dictionary Attack: This is a software that basically enters in every possible password at super-speed until it gets it right. The downside is that depending on the strength of the password, it could takes hours or maybe even weeks.

-Keylogging: This is a software that you place on the victim's computer that records every key that they press (including the text that they entered for the password). The downside is that you must first get the software on the victim's computer for this to work and it also risks being detected.

-Phishing: In my opinion this is the worst type of password cracking and has a low success rate. You basically make a fake website (example yahoo) and tell the person to enter in the password to log in. Then the fake website records the password and sends it back to you. The downside is that the person must be pretty dumb and you must make an official looking website yourself.

When you make a password make sure that:
-It has at least 10 characters
-It has Upper case and Lower case letters
-It has numbers
-It has special characters (Ex. #)

WIRELESS HACKING:

To hack a computer wirelessly, you must first use a program such as Metasploit or code one yourself if you are good enough to scan for vulnerabilities and open ports to exploit. Once you have gained access to the computer you may upload a virus or do whatever you want.

VIRUSES:

Viruses are great if you have access to a system. They are quick to execute since they are written beforehand and they are very effective if written correctly.

Trojans pose as a useful program or even remain undetectable by the computer. They can be used as keyloggers or to create backdoors. A backdoor is a "door" left open by the hacker when he leaves that he can access whenever he wants. Basically if lets the hacker come back whenever he wants.

HOW TO PREVENT YOURSELF FROM GETTING HACKED:

-Get a good security system and keep it updated
-Don't download random stuff from the internet
-Don't open e-mails from people that you don't know

SIGNS THAT YOU ARE GETTING HACKED

-Your mouse pointer moves without you doing anything
-Files are being copied without you authorizing it
-Command prompt opens up randomly
-Internet tabs randomly close

If you see any of these signs then immediately shut off your computer
Then log in to safe mode (when windows is starting up hold F8)
Restore your computer to a date before you downloaded the virus or whatever
Then run a security scan to make sure that the virus is gone and if it is not then you must download a special program to get rid of it.

Below is a link to a thread of mine where I go in depth in all of these subjects

https://hackforums.net/showthread.php?tid=2313922

Thanks for reading this post, please comment/post to keep the thread alive.

Cheers

[Willy Wanka]

no offense but that "restore computer to a point before you got the virus" doesn't really fix it just saying

[Turtle™]

Usually it does but if the virus is sophisticated enough than it may not work in which case you would be right
You should also perform a security scan after just to make sure.

If it is still there than you must use a specialized software to get rid of the virus
Please remember that this is a tutorial for noobs so I am not going to go into every possibility

[Willy Wanka]

Usually it does but if the virus is sophisticated enough than it may not work in which case you would be right
You should also perform a security scan after just to make sure.

If it is still there than you must use a specialized software to get rid of the virus
Please remember that this is a tutorial for noobs so I am not going to go into every possibility

your right. still might want to add it just so they know

[Turtle™]

Yeah i will, thanks for the input
35 characters

[mcfundash]

good tut, I'm sure lots of noobs will understand it very well.

[CaughtonAwebb]

This is exactly where I was looking to begin. thank you jarmander!

[Stev]

Good tutorial for beginners, deserves more replies.

[Heartwarming]

Where you said;

All Black Hat activity is banned on Hack forums.

XSS is more advanced and more websites are vulnerable to XSS than to SQLi. It is injected into the url or search boxes inside the website. XSS mainly uses Javascript and HTML

DOS is with just one and it usually doesn't work

1. Not all black hat activity is banned on HF. RATting is blackhat and there's a section for it.

2. XSS isn't always injected via URL. Sometimes it can be injected via the headers.

3. A DoS attack can completely cripple a website.

I'm going to read through this completely and see if you missed anything else.

Regardless, still a nice little info intro.

[Universal_Polyphony]

Great info, should be stickied or ed like every day lol

[dayjob]

Sweet read, thanks.
Question though, how likely is it that average viruses go undetected by security systems such as free avast software?
BTW, any thoughts on free avast software as a reliable security detection program?

[victormeldrew]

35 characters is a little annoying..
Many thanks!

[Phreak!]

90% of the black hatting activity is banned on HF such as I.D theft, credit card fraud and all that shit.

It's quite a grey area.

[weeman010]

thanks for this post man! really usefull info

[Diji]

When you make a password make sure that:
-It has at least 10 characters
-It has Upper case and Lower case letters
-It has numbers
-It has special characters (Ex. #)

What do you have to say to http://xkcd.com/936/.