How to Hack - Part Two

Crypt · 06-24-2014, 03:57 AM

I liked it except the part where you recommended 2 programming languages. If you were going to use 2 for hacking, why would you choose php and mysql?
Also, you should encourage people to find vulnerabilities on their own. That's what pentesting is, not looking up a vulnerability on exploit-db and doing none of the work for yourself.
Other than that it was decent.

Eclipse · 06-24-2014, 07:10 AM

(06-24-2014, 03:57 AM)Crypt Wrote: I liked it except the part where you recommended 2 programming languages. If you were going to use 2 for hacking, why would you choose php and mysql?
Also, you should encourage people to find vulnerabilities on their own. That's what pentesting is, not looking up a vulnerability on exploit-db and doing none of the work for yourself.
Other than that it was decent.

I'll edit the programming languages. Which ones would you recommend?

Yes, but to start off, they should understand the vulnerabilities and exploits.

Wow, the feedback is amazing! Looks like part three's coming early.

Equinox · 06-24-2014, 07:18 AM

(06-24-2014, 07:10 AM)Aurora Wrote: I'll edit the programming languages. Which ones would you recommend?

Here's what I'd recommend and why.

C, C++ These two languages are very good to learn, these will give you the most flexibility in what programs you make or do with the language itself.

Python Even though I do Python programming a lot, it's not exactly the best language to use. It can be used best if you know what you're doing how. Python is a language that can be learned very quickly and executes quickly itself. If you're going to a quick language that can be pretty flexible (Though not as much as the C family), I'd definitely recommend Python.

PHP, MySQL This will allow you to learn some SQLi, which a lot of sites have problems with. Because of this, it can be something to revert to, checking if a site is vulnerable to SQLi if you can't think of anything else, mainly because of how many sites actually use a database, and a MySQL database at that.

VB .NET Make a GUI interface to trace someones IP address

xlogo · 06-24-2014, 07:19 AM

(06-24-2014, 01:07 AM)MiS Wrote: It's just hard to detect irony or sarcasm on the internet, especially if you haven't established your presence as a person who uses it often.

True - plus some in some countries people just don't get irony - Americans for example are well known for not getting it.

MiS · 06-24-2014, 07:25 AM

(06-24-2014, 07:19 AM)xlogo Wrote: True - plus some in some countries people just don't get irony - Americans for example are well known for not getting it.

I-I'm an American...

This should probably be discussed in another thread if there's any more discussion about it. Size's thread seems fitting enough.

(06-24-2014, 07:10 AM)Aurora Wrote: Wow, the feedback is amazing! Looks like part three's coming early.

It's really beginner friendly and easy to understand! I'm looking forward to the next part.

misnar · 06-24-2014, 04:06 PM

Quote:Learn a programming language or two. PHP, MySQL etc. Don't just learn them and not know what they're for. Understand them. Find out how they fit into the world of hacking.

Quote:Research recon. This is the stage in a penetration test where you gather information and try to find vulnerabilities. This is why Kali Linux is such a good operating system, it comes pre-loaded with hundreds of tools that'll allow you to perform every part of a penetration test. Yes, you won't be familiar with these, but it's easy to learn. Google "Kali Linux Guide for Penetration Testers". Find a good eBook on Amazon and buy it! If you're a typical internet person, then go ahead and torrent it for free. You can also get other guides such as 'Metasploit Guide for Penetration Testers' etc. Familiarize yourself with the main tools in Kali Linux.

Quote:Aurora's guide on how to hack a site!

Browse to the site in question. No, not to Google, but rather to some old WordPress site etc.
Find out if it's running a CMS etc. Let's use a WordPress site as an example in this tutorial. To find out if it's running a CMS, view the source code > between the <head></head> tags. There should be a reference to whatever the site's running on.
Find out what version of it is running. Let's say 1.2.3
Google "WordPress 1.2.3 vulnerability".
Find a suitable exploit. Don't just copy and paste and then run it like a skid would. First understand it. Find out how and why it works.
If the version isn't vulnerable, or is too difficult to exploit, find plugins or other things running on the site and try to exploit them. You have to assess the site for attack vectors, avenues of attack.

this is why you're bad and aren't going to get any better until you understand why you suck.

Eclipse · 06-24-2014, 04:30 PM

(06-24-2014, 07:18 AM)Duubz Wrote: Here's what I'd recommend and why.

C, C++ These two languages are very good to learn, these will give you the most flexibility in what programs you make or do with the language itself.

Python Even though I do Python programming a lot, it's not exactly the best language to use. It can be used best if you know what you're doing how. Python is a language that can be learned very quickly and executes quickly itself. If you're going to a quick language that can be pretty flexible (Though not as much as the C family), I'd definitely recommend Python.

PHP, MySQL This will allow you to learn some SQLi, which a lot of sites have problems with. Because of this, it can be something to revert to, checking if a site is vulnerable to SQLi if you can't think of anything else, mainly because of how many sites actually use a database, and a MySQL database at that.

VB .NET Make a GUI interface to trace someones IP address

Thanks for the reply. Lol, that last one. xD

(06-24-2014, 04:06 PM)misnar Wrote: this is why you're bad and aren't going to get any better until you understand why you suck.

Ok... "For Beginners".

misnar · 06-24-2014, 11:12 PM

(06-24-2014, 04:30 PM)Aurora Wrote: Ok... "For Beginners".

it's not good for beginners either, it's just bad in general.

MiS · 06-25-2014, 01:22 AM

(06-24-2014, 11:12 PM)misnar Wrote: it's not good for beginners either, it's just bad in general.

What exactly is bad about it?

superMAUS · 06-25-2014, 08:16 AM

(06-25-2014, 01:22 AM)MiS Wrote: What exactly is bad about it?

I definitely agree with misnar. Auroras a really nice person so I'm not going to rant though.

How to Hack - Part Two
Author Message