[bandors]

I wanted to go over some "practical" hacking methods. These methods are very easy, and if you are looking to hack someone you should consider them.
The coolest thing that a lot of people don't talk about is the hak5 OMG cable
Spoiler (Click to View)


If you can convince someone with an iphone or android to use your charging cable, you can hack their phone. It's a really nice tool. There are also autorun USBs for computers.

It's also really easy to encrypt a rat stub, and embed that in a document. .doc exploits are very effective at hacking people, especially with the right excuse for sending someone a document. Modern .doc exploits are a little expensive though, and there's a lot of shitty ones that you will see for sale. So for noobs it might be tricky to find one without wasting your money!

Another really effective method is man in the middle attacks. You can de-authenticate people from a network, without ever having the network password.
Then, you can force people to connect to your network, remove SSL from their traffic, and steal their logins. You can also capture office email traffic when listening to company networks.

One thing that will never work is a bruteforcing tool, you will never hack a social media account using a password cracker.
Besides these, good old phishing is still extremely effective. People might be shy to phishing since they think that they are not effective, or the target will not click the link. Crafting a good phish pretext is an important skill. You just have to try it, and you'll see it's still a great hacking method.

What else do you guys think that noobs should know about as easy to learn, yet powerful hacking methods? 😎

[randomvodkalover]

I wanted to go over some "practical" hacking methods. These methods are very easy, and if you are looking to hack someone you should consider them.
The coolest thing that a lot of people don't talk about is the hak5 OMG cable
Spoiler (Click to View)


If you can convince someone with an iphone or android to use your charging cable, you can hack their phone. It's a really nice tool. There are also autorun USBs for computers.

It's also really easy to encrypt a rat stub, and embed that in a document. .doc exploits are very effective at hacking people, especially with the right excuse for sending someone a document. Modern .doc exploits are a little expensive though, and there's a lot of shitty ones that you will see for sale. So for noobs it might be tricky to find one without wasting your money!

Another really effective method is man in the middle attacks. You can de-authenticate people from a network, without ever having the network password.
Then, you can force people to connect to your network, remove SSL from their traffic, and steal their logins. You can also capture office email traffic when listening to company networks.

One thing that will never work is a bruteforcing tool, you will never hack a social media account using a password cracker.
Besides these, good old phishing is still extremely effective. People might be shy to phishing since they think that they are not effective, or the target will not click the link. Crafting a good phish pretext is an important skill. You just have to try it, and you'll see it's still a great hacking method.

What else do you guys think that noobs should know about as easy to learn, yet powerful hacking methods? 😎

USB rubber ducky attack and password guessing. Even USB stealer if AV doesn't stop you

[bandors]

I think I shared some of the best methods out there that are easy for noobs :D

[Argonaut.exe]

I own a Usb RubberDucky and Wifi Pineapple , the first one is amazing and simple, the second one still need some skill but definitely easier than set up a dongle with apache/nginx php dnsmasq and maybe some iptables.

Evil portal module (an evil twin attack) is a pretty good way to trick ppl still in 2020

[♥Starfire♥]

Awesome, this has a lot of potential honestly. If I knew anything about hacking i'd pick this up, lol.

[bandors]

Let me know if anyone can think of any other easy methods for noobs I should add to the thread.

[Darkie Smith]

You can hack people who put no thought into security rather easily if you're not a skid just looking for a "Hack anyone free program.exe"

Hacking someone or something that has a reason to actually attack, usually means they will have some sort of security and pose some challenge to infilitrate. Defacing some ma and pops website they threw togher that doesn't host any vital secret info or CCs or customer info is just shitty. And sad. If you were whitehat and doing it for fun, but just putting the landing page to a "Gotcha! your security sucks! Here is a link to the real site!" and messaging the website owner where you found the security flaw and how they can fix it is totally different. That's what I would say a much more moral way to be practicing "hacking." Obviously, if you did this to a site that stored financial data and stuff and got the info and didn't let them know you got them, and used the info maliciously that'd be blackhat illegal activity I can't advocate.

I do think though, the answer to so many noobs question "how do I hack" should always be educate yourself. If you want to hack websites, you want to know about how you can make the site in question in the first place. If you want to get into any secure SQL databases with info worth a damn in blackhat activity, you want to know how to operate the site and such. Same if you're doing it with good intent. Some would say defacing a site but not using the info malicously, and not harming the site; just putting a deface page with a link to the real site and letting the site owner know their vulnerability is "greyhat." Not going to really comment my opinion since it doesn't really matter.

If anyone wants to learn to "hack," assuming they're talking about the most common forms of "Hacking"...
Learn how websites run, operate, and secure themselves. If you have no idea how your target was made you're not going to be able to get into it without using skid tactics. I think SQL is a great example. If you have no idea how mysql or hashes work, you're going to have to use some skript kiddy methods to do so. other methods you want to know networking, and network security ect. Pulling an IP with a resolver then DOSing/DDOsing them with a stresser you paid for is not hacking... Now, on the other hand -if you used your own methods to get an IP of someone or something that put effort into concealing this, and used a sophisticated method to make the DDOS work with your own botnet, Shells, VPS, or whatever that shows a lot more knowledge than knocking someone's home connection off by using a skype resolver and a paid booter.

It's kind of pathetic, some of the most notorious "hackers" used methods that they didn't even understand or make on their own. They paid for a service, or had someone else do it. If you took down someone/somethings internet by getting the IP through social engineering information, that lead you to more information that lead you to a last login IP from a recent DB breach; then, discovered what counter measures to DDOSing they have and developing or using a method that gets around this using your own knowledge and research - is MUCH more respectable than just using paid services to attack someone who doesn't have protecting because they never thought some random kid would have a pointless vendetta against them to e-vandalize them just because they could . This isn't to say that everyone who uses these services is a skid, if you pulled someone's IP and used a paid stresser just to take them down with ease because they're calling everyone racial slurs and being a general P.O.S I wouldn't say that's shameful. But doing so to the random dude who killed you fairly just because you're mad? Sad

[dan9296]

There are a lot of requests for HACKING snapchat/instagram, clearly brute force just doesnt work on social media sites but are there actual ways to crack passwords? (not phishing, social engineering, keylogger)

[randomvodkalover]

There are a lot of requests for HACKING snapchat/instagram, clearly brute force just doesnt work on social media sites but are there actual ways to crack passwords? (not phishing, social engineering, keylogger)

You literally named other methods(phishing, social engineering and keylogging). There is one more interesting method if you have access to target's computer and if target saves passwords in browser. It's called USB stealer. You just put program in usb that steals saved passwords from browser.

[bandors]

There are a lot of requests for HACKING snapchat/instagram, clearly brute force just doesnt work on social media sites but are there actual ways to crack passwords? (not phishing, social engineering, keylogger)

Read this thread, it has all the best methods I know of for noobs :D

[M0therSkidder]

You can’t easily hack a phone with the hak5 OMG cable.
It’s supposed to be used with the computer that is connected to the cable and not with a phone.

[bandors]

This is a great little writeup for noobs!

[ExploitSystem]

Why do you keep bumping this thread op? I mean you named a few decent ones, which are good for noobs, but are you fishing for reps or what? or trying to sell your hacking tutor services ? lol

[bandors]

Why do you keep bumping this thread op? I mean you named a few decent ones, which are good for noobs, but are you fishing for reps or what? or trying to sell your hacking tutor services ? lol

So the new people can see, this section is where new members go usually

[1337ITWizKid]

Damn, pretty cool piece of technology. This is a pretty fat review/recommendation. I wonder if OP got paid to share this or if he has some type of connection.