[phybeя]

[img]http://i.minus.com/iIiprJo4dW3tq.png[/img]

[img]http://i.minus.com/iFVezNQieI6Q9.png[/img]

[img]http://i.minus.com/jid5oVRorCLFC.jpg[/img]

[img]http://i.minus.com/ictIOWsQAavJW.png[/img]

I've seen many members post threads asking how/where to get started as a white hat so I decided to create this brief thread so that members could refer to it for assistance.

First off, what is a "white hat" hacker?

I'm sure most of you know but for those of you who are unfamiliar with the term, it's a term used to describe an ethical computer hacker. Rather than having malicious intentions like a black hat hacker, a white hat hacker helps to improve security. The term actually comes from old Western movies where it was common for the good guys to wear a white cowboy hat and bad guys to wear black ones.

White hat hackers specialize in a variety of skills which include but are not limited to the following:

• Penetration testing/Network security
  


• Malware analysis
  


• Website security
  


• Reverse engineering
  


• Social engineering
  
  

[img]http://i.minus.com/iMFhpMoYBfyJv.png[/img]

Well first off, it's legal. You don't have to worry about being caught/punished for your actions UNLESS you don't ask permission in which case it would technically classify as "black hat". Whenever you are doing white hat work, you must always make sure you ask permission to conduct whatever it is you are doing so that the client is aware. This distinguishes it from being black hat.

The computer security industry is not only lucrative but rapidly growing. As technology becomes more and more dominant in our everyday lives, companies are looking for computer security specialists to help keep their business secure. Huge companies have suffered from security breaches in the past which have cost them millions in damage. If you are truly passionate about IT security, there are plenty of jobs out there for you.

[img]http://i.minus.com/ibrLthdEVeVGeF.png[/img]

Here is a list of terms that are common in the white hat world:

Penetration testing: A method of evaluating computer/network security by simulating attacks both external/internal - To learn more about Penetration testing, visit the Pentesting and Forensics forum on HF

Exploit: Taking advantage of a security vulnerability

Social Engineering: Using human psychology skills to manipulate and retrieve information from people(this can be used to access confidential information)

Reverse engineering: Essentially breaking down software/code in order to analyze and understand it

I will continue adding to this list.

[img]http://i.minus.com/iLxMcZEso88Bn.png[/img]

All getting started really involves is educating yourself.

There is no magical button that will turn you into a white hat hacker overnight or anything of that sort. It starts off as a decision. The decision is simply to conduct your online activities in an ethical manner . Yes, this means you might have to give up ratting and messing around with botnets and booters, sorry kids. After you make the decision, you can start converting your old ways into helping people rather than "hurting" them. This could range anywhere from helping out in the White Hat help section or anywhere a member may require help. Of course this isn't limited to just this forum or online, you could help friends and family with their computer issues as well.

Programming and its role in Ethical Hacking

People always ask is it necessary to learn how to program to "hack" or be good? Short answer: YES. Sure, you might be able to pull of some basic tricks and attacks without any advanced programming experience but to truly be considered a security expert, you must understand how programming works.

Learning how to program is vital to ethical hacking and hacking in general as well. Being able to pick apart different code(s) and understand how it works will be highly beneficial. For website security, I would recommend learning: PHP , HTML , Javascript, ASP.NET. For application security, C, C++, Python, Unix/Linux and Assembly language.

Like I said, it's not an overnight transformation. Over time, you will begin to pick up different pieces of information that will help you help others.

[img]http://i.minus.com/isDfeEhepj7Og.png[/img]

Here are a couple of resources I would recommend reading to get familiar with the White Hat scene:

Hacking for Beginners

How to Become an Ethical Hacker

Tech Ebooks on Information Security


There are also various programs out there which you can take to learn about ethical hacking. Most do cost money but you can find some free material online.

A popular one is the Certified Ethical Hacker training course: https://www.eccouncil.org/Certification/...cal-hacker
This course provides you with up to date material and methods to learn how to conduct ethical hacking.

I've also compiled a bunch of Ethical Hacking resources I've gathered over time into a .rar which you are free to download: https://dl.dropboxusercontent.com/u/6267...ources.rar
I know some of the material is outdated but some concepts still apply and you can use it to find more recent versions.

[img]http://i.minus.com/jid5oVRorCLFC.jpg[/img]

I will update this thread frequently so please feel free to leave feedback/suggestions and I'd be more than happy to include information I deem worthy.

[Aura]

Holy what a tutorial Phyber, it was time for you to do something ! 😈
First post so tell me if you ever want me to delete it so you can grab this spot.

[phybeя]

Holy what a tutorial Phyber, it was time for you to do something ! 😈
First post so tell me if you ever want me to delete it so you can grab this spot.

Haha kind of a brief thread but I covered what I thought was most important for the time being. Will continue to update it.

And thanks :)

[N1251]

Thank you for this tutorial. What programming language is more commonly used overall? Which should i learn first? I have books on social engineering and manipulation techniques, so that parts sorta covered already.

[phybeя]

Thank you for this tutorial. What programming language is more commonly used overall? Which should i learn first? I have books on social engineering and manipulation techniques, so that parts sorta covered already.

Well it depends on if you are referring to website security or application security since it would differ. There isn't really an "overall" language I would recommend since it all depends on which path you are leaning towards.

[N1251]

Well it depends on if you are referring to website security or application security since it would differ. There isn't really an "overall" language I would recommend since it all depends on which path you are leaning towards.

I was thinking sort of a pen tester path. I have books on c++ language and python, which one should I pick? Which would be easier? Which would have more overall benefit? 🎉

[phuqer]

Python would be much easier to learn, and you can start here http://www.codecademy.com/
C/C++ would probably be more beneficial, as it would make learning other languages easier as well.

@OP well written post.

[V3gapUnk]

I want to be a student ... of white hat hacker . Cool! Phyber!

[Gustav.]

Like I said before on Skype; be sure to add more information and all that good stuff. But overall, this guide is something members considering to become White hat should look into.

[phybeя]

I was thinking sort of a pen tester path. I have books on c++ language and python, which one should I pick? Which would be easier? Which would have more overall benefit? 🎉

Exactly what phuqher said above.

That's what I'd recommend as well.

[PongViking]

Very nice tutorial.
Thank you very much for this.

[Corso]

Nice little read, :( no mentions in it lol - anyway good start man, can't wait to see you keep adding.

[Pickles12]

GREAT TUTORIAL! I almost feel like a hacker now 🙂

[Jagster™]

Nice thread phybeя, some good links in there. Hopefully others will leave the DarkSide to join us =)

[17R0LL]

Thank you for this, was an interesting read! Will keep checking this thread for updates.