[Alan Turing]

What exactly is bad about it?

Having someone google "wordpress exploit" and using it to hack a site is really shitty and doesn't make you good. You don't want to be the guy who does that, you want to be the guy who publishes that exploit.

---

You're not going to be getting really far if you're relying on nmap and metasploit either. Kali is bloated and full of tools you'll never glance at in your life. Pick a *nix distro and put tools that you want on

---

Here's what I'd recommend and why.

C, C++ These two languages are very good to learn, these will give you the most flexibility in what programs you make or do with the language itself.

Python Even though I do Python programming a lot, it's not exactly the best language to use. It can be used best if you know what you're doing how. Python is a language that can be learned very quickly and executes quickly itself. If you're going to a quick language that can be pretty flexible (Though not as much as the C family), I'd definitely recommend Python.

PHP, MySQL This will allow you to learn some SQLi, which a lot of sites have problems with. Because of this, it can be something to revert to, checking if a site is vulnerable to SQLi if you can't think of anything else, mainly because of how many sites actually use a database, and a MySQL database at that.

VB .NET Make a GUI interface to trace someones IP address

It's personal preference and depends on what hacking you want to do. You wouldn't learn PHP to learn about pointer dangling or ROP.

Anything low level or anything not web orientated:
Perl/Python, C/C++, flavor of assembly

Web Related:
PHP, Javascript, SQL and I guess SQL variants

---

"First thing that you should do is join a good, HQ technology and/or hacking forum. Stay active, stay HQ, and you will learn a LOT. Trust me."


This is just not even needed.

[superMAUS]

You're not going to be getting really far if you're relying on nmap and metasploit either. Kali is bloated and full of tools you'll never glance at in your life. Pick a *nix distro and put tools that you want on

So fucking right.
Off-topic: What tools do you use?

[Adorapuff]

So fucking right.
Off-topic: What tools do you use?

know that wasn't to me but I use immunity debugger and a bit of metasploit to generate payloads and because it has pattern_offset.

For anyone wondering when can a buffer overflow be used in a real life situation go on youtube and watch the buffer overflow research mega primer starting at video 2.

[Bannedshee]

May I recommend Sinister.ly? I hear that one's nice ^^


"There is hope, and then there's belief"; and I believe he's not, but I hope with my entire heart I'm wrong.

OT; Awesome series and great writing; can't wait for part three ^^

Tbh SL isnt really even a hacking forum anymore.

Good thread though.

[Alan Turing]

So fucking right.
Off-topic: What tools do you use?

gcc, g++, GDB, NMap, objdump, pattern_offset and pattern_create


that's it really...even the last two aren't even needed, but it just speeds up the process, i could just keep guessing but that's tiresome.

[Cressi]

Tbh SL isnt really even a hacking forum anymore.

Good thread though.

*Tech forum with a large 'lounge'. It's still nice, though

[Eclipse]

Having someone google "wordpress exploit" and using it to hack a site is really shitty and doesn't make you good. You don't want to be the guy who does that, you want to be the guy who publishes that exploit.

You're completely correct, but to be able to publish an exploit, you need to be able to write one, and to do that, you first need to understand what makes the code vulnerable and how the exploit does what it does. So, using Google and then trying to understand how the exploits work is sort of a necessity at the start. Exploit-DB is useful because it's publishes the vulnerable code next to the exploit.

[DarkMuse]

Tbh SL isnt really even a hacking forum anymore.

Good thread though.

Well.
That's a little off topic in itself so what good is even to bring that up.

[superMAUS]

know that wasn't to me but I use immunity debugger and a bit of metasploit to generate payloads and because it has pattern_offset.

For anyone wondering when can a buffer overflow be used in a real life situation go on youtube and watch the buffer overflow research mega primer starting at video 2.

your a skilled user so directed at you too suppose

---

Well.
That's a little off topic in itself so what good is even to bring that up.

Its not off-topic, its a criticism of the thread. Do not beat down what you don't like to hear.

---

gcc, g++, GDB, NMap, objdump, pattern_offset and pattern_create


that's it really...even the last two aren't even needed, but it just speeds up the process, i could just keep guessing but that's tiresome.

how often do you use memory corruption 0days to actually get into stuff?

---

You're completely correct, but to be able to publish an exploit, you need to be able to write one, and to do that, you first need to understand what makes the code vulnerable and how the exploit does what it does. So, using Google and then trying to understand how the exploits work is sort of a necessity at the start. Exploit-DB is useful because it's publishes the vulnerable code next to the exploit.

It often doesn't but I can see where you are coming from.

[DarkMuse]

Its not off-topic, its a criticism of the thread. Do not beat down what you don't like to hear.

Well it doesnt have to do with hacking or computers so I figured that didnt fit either. Also was not not beating down just stating.