+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+--- Thread: How to Hack - Part Two (/Thread-How-to-Hack-Part-Two)
RE: How to Hack - Part Two - Alan Turing - 06-27-2014
(06-25-2014, 01:22 AM)MiS Wrote: What exactly is bad about it?
Having someone google "wordpress exploit" and using it to hack a site is really shitty and doesn't make you good. You don't want to be the guy who does that, you want to be the guy who publishes that exploit.
You're not going to be getting really far if you're relying on nmap and metasploit either. Kali is bloated and full of tools you'll never glance at in your life. Pick a *nix distro and put tools that you want on
(06-24-2014, 07:18 AM)Duubz Wrote: Here's what I'd recommend and why.
C, C++ These two languages are very good to learn, these will give you the most flexibility in what programs you make or do with the language itself.
Python Even though I do Python programming a lot, it's not exactly the best language to use. It can be used best if you know what you're doing how. Python is a language that can be learned very quickly and executes quickly itself. If you're going to a quick language that can be pretty flexible (Though not as much as the C family), I'd definitely recommend Python.
PHP, MySQL This will allow you to learn some SQLi, which a lot of sites have problems with. Because of this, it can be something to revert to, checking if a site is vulnerable to SQLi if you can't think of anything else, mainly because of how many sites actually use a database, and a MySQL database at that.
VB .NET Make a GUI interface to trace someones IP address
It's personal preference and depends on what hacking you want to do. You wouldn't learn PHP to learn about pointer dangling or ROP.
Anything low level or anything not web orientated:
Perl/Python, C/C++, flavor of assembly
Web Related:
PHP, Javascript, SQL and I guess SQL variants
"First thing that you should do is join a good, HQ technology and/or hacking forum. Stay active, stay HQ, and you will learn a LOT. Trust me."
This is just not even needed.
RE: How to Hack - Part Two - superMAUS - 06-27-2014
(06-27-2014, 04:05 AM)Kosaki Wrote: You're not going to be getting really far if you're relying on nmap and metasploit either. Kali is bloated and full of tools you'll never glance at in your life. Pick a *nix distro and put tools that you want on
So fucking right.
Off-topic: What tools do you use?
RE: How to Hack - Part Two - Adorapuff - 06-27-2014
(06-27-2014, 12:20 PM)superMAUS Wrote: So fucking right.
Off-topic: What tools do you use?
know that wasn't to me but I use immunity debugger and a bit of metasploit to generate payloads and because it has pattern_offset.
For anyone wondering when can a buffer overflow be used in a real life situation go on youtube and watch the buffer overflow research mega primer starting at video 2.
RE: How to Hack - Part Two - Bannedshee - 06-27-2014
(06-23-2014, 10:51 PM)Cressi Wrote: May I recommend Sinister.ly? I hear that one's nice ^^
"There is hope, and then there's belief"; and I believe he's not, but I hope with my entire heart I'm wrong.
OT; Awesome series and great writing; can't wait for part three ^^
Tbh SL isnt really even a hacking forum anymore.
Good thread though.
RE: How to Hack - Part Two - Alan Turing - 06-27-2014
(06-27-2014, 12:20 PM)superMAUS Wrote: So fucking right.
Off-topic: What tools do you use?
gcc, g++, GDB, NMap, objdump, pattern_offset and pattern_create
that's it really...even the last two aren't even needed, but it just speeds up the process, i could just keep guessing but that's tiresome.
RE: How to Hack - Part Two - Cressi - 06-27-2014
(06-27-2014, 07:25 PM)Bannedshee Wrote: Tbh SL isnt really even a hacking forum anymore.
Good thread though.
*Tech forum with a large 'lounge'. It's still nice, though
RE: How to Hack - Part Two - Eclipse - 06-27-2014
(06-27-2014, 04:05 AM)Kosaki Wrote: Having someone google "wordpress exploit" and using it to hack a site is really shitty and doesn't make you good. You don't want to be the guy who does that, you want to be the guy who publishes that exploit.
You're completely correct, but to be able to publish an exploit, you need to be able to write one, and to do that, you first need to understand what makes the code vulnerable and how the exploit does what it does. So, using Google and then trying to understand how the exploits work is sort of a necessity at the start. Exploit-DB is useful because it's publishes the vulnerable code next to the exploit.
Re: RE: How to Hack - Part Two - DarkMuse - 06-27-2014
(06-27-2014, 07:25 PM)Bannedshee Wrote: Tbh SL isnt really even a hacking forum anymore.Well.
Good thread though.
That's a little off topic in itself so what good is even to bring that up.
RE: How to Hack - Part Two - superMAUS - 06-28-2014
(06-27-2014, 06:39 PM)Adorapuff Wrote: know that wasn't to me but I use immunity debugger and a bit of metasploit to generate payloads and because it has pattern_offset.
For anyone wondering when can a buffer overflow be used in a real life situation go on youtube and watch the buffer overflow research mega primer starting at video 2.
your a skilled user so directed at you too suppose
(06-27-2014, 11:05 PM)DarkMuse Wrote: Well.
That's a little off topic in itself so what good is even to bring that up.
Its not off-topic, its a criticism of the thread. Do not beat down what you don't like to hear.
(06-27-2014, 08:34 PM)Kosaki Wrote: gcc, g++, GDB, NMap, objdump, pattern_offset and pattern_create
that's it really...even the last two aren't even needed, but it just speeds up the process, i could just keep guessing but that's tiresome.
how often do you use memory corruption 0days to actually get into stuff?
(06-27-2014, 09:48 PM)Aurora Wrote: You're completely correct, but to be able to publish an exploit, you need to be able to write one, and to do that, you first need to understand what makes the code vulnerable and how the exploit does what it does. So, using Google and then trying to understand how the exploits work is sort of a necessity at the start. Exploit-DB is useful because it's publishes the vulnerable code next to the exploit.
It often doesn't but I can see where you are coming from.
Re: RE: How to Hack - Part Two - DarkMuse - 06-28-2014
(06-28-2014, 12:33 AM)superMAUS Wrote: Its not off-topic, its a criticism of the thread. Do not beat down what you don't like to hear.Well it doesnt have to do with hacking or computers so I figured that didnt fit either. Also was not not beating down just stating.