From Script Kiddie to a Hacker - A Comprehensive Guide for the Misguided

From Script Kiddie to a Hacker - A Comprehensive Guide for the Misguided - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+--- Thread: From Script Kiddie to a Hacker - A Comprehensive Guide for the Misguided (/Thread-From-Script-Kiddie-to-a-Hacker-A-Comprehensive-Guide-for-the-Misguided)

Pages: 1 2 3 4

From Script Kiddie to a Hacker - A Comprehensive Guide for the Misguided - Ex094 - 06-08-2013

Hello Hack community, Yet this is one of my other tutorials for all of my fellow Penetration Testers. The reason I've created such a thread is because of these 4 reasons:

1) I feel guilty for people who make fun of Hacking by saying "I can hack you're facebook, Now bow before me!" (Seriously?? )
2) I feel bad for people who can't differentiate between Hacking and Cracking
3) I feel hatred for people who can't tell the difference between a Hacker and a Penetration Tester
4) Last but not the least, I feel awful for people who call themselves "Certified/Professional Ethical or Black hat Hacker" after hacking a Facebook account, A weak WEP Key and atlast opening a Blog with the title "An Ethical Hackers Blog"

Here's something for the people I mentioned above:

Spoiler:

These are just the few of my large list of reasons due to which I created this post but before I continue please keep in mind that I will be writing some stuff that might seem offending to you but it isn't because this thread is for awareness.

Here's what we are going to discuss:

1) Who is a "Hacker" ?
2) List of things that are "NOT" Hacking
3) Difference between Hacking and Cracking
4) Actual and Real time Hacking
5) Difference between an Hacker and a Penetration Tester
6) Challenge

1) Who is a Hacker and What is Hacking??

A Hacker is a person who specializes in computer security, Discovers and Exploits the vulnerabilities found using his own set of particular skill, tools and knowledge. A hacker might do such thing for his own purpose or for money or even as a challenge. In this era of technology and cybernet, Many people especially the government think of Hackers as so called Criminals. Well the thing that you should remember is that not all Hackers are criminals. Hackers have types like Black Hats, White Hats and Grey Hats. Out of them Black Hats are considered to be criminals but in this era people take Hackers as a potential threat. Well we are not here to discuss about threat but we are here to discuss the true meaning of a Hacker and Hacking.

There are many meanings of a Hacker like this one from wikipedia:

Code:
A hacker is someone who seeks and exploits weaknesses in a computer system or computer network. Hackers may be motivated by a multitude of reasons, such as profit, protest, or challenge.

For us the true definition if a Hacker would be:

Code:
A person having security analysis and exploitation skills, able to exploit vulnerabilities on a target system by using his own set of Tools and Exploits

Taking the above definition in view, it clearly states that a Hacker uses Tools that he codes and makes Himself. This also indicates that this person has significant knowledge in Programming using which he is able to code his own required tools. Exploitation itself is not easy as it requires constant observation for detecting vulnerabilities and coding an exploit for them which too requires programming as well.

The inverse of a Hacker is a Script Kiddie, uses tools made by others to exploit vulnerabilities.

Point to Ponder?

Now my question is that "Are you a Hacker?" Keep thinking about it and you will figure out

More Deep Stuff

You've noticed that we use tools like Havij, SQLmap, SQLdumper, Hydra, Orphcrack, Metasploit etc to Exploit, Crack and Hack but these tools are built by others. How come we are Hackers when we use tools built by others? We should be called Script Kiddies instead. This is the part where most of the arguments are carried out, We can't stop using the word Hacker for ourselves even if we aren't one. This is not our fault, this is because the meaning of Hacking is being taken in the wrong way and off course the beginners who are eager to do learn hacking in just a blink of an eye. No! Thats not even fucking possible! Just as programming you can't call your self a professional programmer no matter how much you do! Same goes with Hacking.Each and Every day something new gets made and it is designed in such a manner as to provide a 99% possibility of being secure. For that Hackers have to go deep and study more about it.

We hear news that a Bank got Hacked and some vicious amount of money was stolen. It may seem to be easy for n00bies but if you ask the Hackers who have done it you will be amazed by the amount of deep work they had done before carrying out the attack, They had to find out the main bank server, tackle their security protocols, firewalls, IDS etc and for that they had to find out which type of system they were using. Then to study deep about that system, find out a way to tackle it. After getting pass it, now how to get access to the main server and stuff like that. And the most import of the thing is How they stay Anonymous?

Hahaha, Now after reading the above paragraph now think again, "Am I a Hacker?"

Script Kiddie, The wrong part

Now days one can easily be tempted to anger by saying "You are a Script Kiddie!" and there goes the fight and argument! The problem is the same, The meaning of script kiddie is being a person who has no knowledge of anything related to the relevant field. If you read the definition of Script Kiddie:

Code:
A script kiddie (also known as a skid or skiddie) is a non-expert who breaks into computer systems by using pre-packaged automated tools written by others, usually with little understanding of the underlying concept—hence the term script (i.e. a prearranged plan or set of activities) kiddie (i.e. kid, child—an individual lacking knowledge and experience, immature)

It states that a Script Kiddie is a non expert but that doesn't mean he/she has not knowledge or skill, A script Kiddie has concepts and knowledge and more of it than that of a newbie or a n00b. People sometime get angry when one blames over knowledge, No one knows anything to a 100% extent so why can't be admit we are scrip kiddies, I don't see any point or a bad thing in it because:

1) You know your stuff about hacking, exploiting etc (N00b's don't)
2) You can use tools (N00bs can't)
3) You have potential (N00bs don't)
4) You have skills to use them (N00bs don't)
5) You are gaining more knowledge about your relevant field (N00bs are lazy at this point and not you)

and so more!

The point was, Don't be angry when called upon a Script Kiddie, A SK knows much about his real shit rather than a n00b who want to learn the damn shit which are done in years or maybe lifetime, in days. So yeah there's a 101% difference between a N00b and a Script Kiddie and remember

Script Kiddie is not a N00b

2) List of things that are NOT Hacking or even a part of it

People have been merging wrong fields with Hacking as a part of it. Let me tell you one thing that Hacking is way out of your League and by this I mean it's not easy and it takes a lifetime to become an expert in this field but n00bs have taken a wrong turn. They have been considering things on their own as a part of Hacking. Let me list some stuff here for your own explanation:

1) Hacking Facebook, Twitter etc accounts, this is what usually n00bs say but it's actually Cracking so it isn't Hacking. I will discuss the difference between Hacking and Cracking in the next topic

2) Cracking Wifi Passwords is not hacking.

3) Infecting with RAT and get credentials is not Hacking

4) Gaining access to a target OS using already made exploits, tools etc is not Hacking, If you have a problem with this statement. Read the Hacking definition again and don't argue as it's the bare truth and down deep inside you know it Smile

5) Reverse Engineering is not Hacking, It's Cracking

Add more if you want

3) Difference Between Cracking and Hacking

[table]
[row]
[cell] Cracking [/cell]
[cell] Hacking [/cell]
[/row]
[row]
[cell] Illegal side of Hacking[/cell]
[cell] Not Illegal but depends upon in which manner the people use it in[/cell]
[/row]
[row]
[cell] Mainly associated in stealing, breaking passwords, bruteforce accounts, reverse engineering [/cell]
[cell] Mainly focuses on exploiting vulnerabilities on target system and gaining access[/cell]
[/row]
[row]
[cell] Crackers do stuff for popularity mainly [/cell]
[cell] Hackers do stuff for their own purpose like White Hat's Black Hats and Grey Hats[/cell]
[/row]
[row]
[cell] Cracking is true crime because we are not taking permissions here[/cell]
[cell] Ethical Hacking is legal as it involves taking permission on the first basis[/cell]
[/row]
[/table]

4) Real And Actual Hacking Events

One of my favourite hackers from the past is Kevin Mitnick, they are legendary and their work is almost perfection. Unless you read some real time encounter of these hacker you won't be able to get the true spirit of hacking and how it's done. Read this book written by Kevin Mitnick http://deathmule.nullfile.com/documents/taoi.pdf
You'll be amazed at the end of the book!

5) Difference Between Hacker and Penetration Tester

I couldn't describe it much easier than this explanation I found on Wiki:

Code:
According to the EC-Council's Certified Ethical Hacker course documentation the two can be defined as follows;

Penetration Testing:
A goal-oriented project of which the goal is the trophy and includes gaining privileged access by pre-conditional means.

Ethical Hacking:
A penetration test of which the goal is to discover trophies throughout the network within the predetermined project time limit.

For me reading that I would say difference is; a pen-test has a single goal (trophy) and strict procedures that have to be followed to get that trophy, and an ethical hack is a much larger beast that involves many goals or trophies, could last so long it needs to be time restricted, and in general has less limits.

So a pen-test is "one goal, one process" and ethical hacking is "hack everything that can be hacked, ethically"

Challenge

If you think you are the greatest Hacker of all time, then make your computer Hack Proof!

Solution (Only press this button if you failed above)

Spoiler:Are you serious? After reading all that stuff you still think you can make your OS unhackable? Well there is not solution for that as "Nothing is Secure"

A Guide Written by Ex094
Some reference taken from Wikipedia and Google

RE: From Script Kiddie to a Hacker - A Comprehensive Guide for the Misguided - bluedog.tar.gz - 06-08-2013

Well written, well detailed, some jokes here and there. I love it +1

RE: From Script Kiddie to a Hacker - A Comprehensive Guide for the Misguided - noize - 06-08-2013

I couldn't not press the thanks button as long as you've done a detailed guide, probably helpful for many. The thanks is hence for your contribution, to the hackers world and to the hack community. Wink

Though, I don't agree with a few things said there.

1. A cracker is a hacker. "Hacker" is a mostly generical term, read again the definition given by Wikipedia. Doesn't a cracker penetrate, exploit vulnerabilities, to crack? Thus, a cracker is an hacker (and not needly a black-hat one).

2. All of that "things that are not hacking", are actually hacking.

3. The very starting part. True thing:

Code:
hacker != cracker
hacker != pentester

But just in the same way that true is:

Code:
int != 1

What I mean is, you can't say that a cracker is not a hacker, same for pentesters, but you can't even say they're the same thing, 'cause a hacker might not be a pentester, a hacker might not be a cracker, and still be an hacker.

Cheers.

RE: From Script Kiddie to a Hacker - A Comprehensive Guide for the Misguided - Ex094 - 06-08-2013

(06-08-2013, 03:45 PM)noize Wrote: I couldn't not press the thanks button as long as you've done a detailed guide, probably helpful for many. The thanks is hence for your contribution, to the hackers world and to the hack community. Though, I don't agree with a few things said there.

1. A cracker is a hacker. "Hacker" is a mostly generical term, read again the definition given by Wikipedia. Doesn't a cracker penetrate, exploit vulnerabilities, to crack? Thus, a cracker is an hacker (and not needly a black-hat one).

2. All of that "things that are not hacking", are actually hacking.

3. The very starting part. True thing:

Code:
hacker != cracker hacker != pentester

But just in the same way that true is:

Code:
int != 1

What I mean is, you can't say that a cracker is not a hacker, same for pentesters, but you can't even say they're the same thing, 'cause a hacker might not be a pentester, a hacker might not be a cracker, and still be an hacker.

Cheers.

I've read the definition and I know it, that is why I mentioned cracking is the illegal side of Hacking but still for me Hacking is not Cracking and believe me those methods are not hacking, Why? Read the Hacking definition. But here's the answer for you, Hacker (or Cracker as you say) use tools coded by himself and exploits, cracks etc using them but we are using stuff that others have made which is not even close to Hacking.

The second thing is that the tern Hacking refers to something more complex, Read the book I mentioned. Breaking passes for twitter accounts is not that complex as they don't require Complex, so that’s the second point for that things not being Hacking.

Also I don't say Pentesters are not Hackers, A Hacker would be a complete word to define them all and to be a Hacker you need all the skill but the question is "Do you have alll the skills?" and finally "Are you a Hacker?" That is why I've differentiated between the individuals.

Hacker is a Collective term

RE: From Script Kiddie to a Hacker - A Comprehensive Guide for the Misguided - noize - 06-08-2013

Quote:I've read the definition and I know it, that is why I mentioned cracking is the illegal side of Hacking but still for me Hacking is not Cracking and believe me those methods are not hacking, Why? Read the Hacking definition. But here's the answer for you, Hacker (or Cracker as you say) use tools coded by himself and exploits, cracks etc using them but we are using stuff that others have made which is not even close to Hacking.

The second thing is that the tern Hacking refers to something more complex, Read the book I mentioned. Breaking passes for twitter accounts is not that complex as they don't require Complex, so that’s the second point for that things not being Hacking.

Also I don't say Pentesters are not Hackers, A Hacker would be a complete word to define them all and to be a Hacker you need all the skill but the question is "Do you have alll the skills?" and finally "Are you a Hacker?" That is why I've differentiated between the individuals.

Hacker is a Collective term

I agree. Hackers who really deserve respect are the ones who code their tools by theirselves. Though, (this is what I get from what you say, hopefully this is what you really meant) you're saying that hackers who don't code their tools by theirselves shouldn't be called so (<quote>use tools that others have made and this is not even close to hacking</quote>). The border line between this kind of hackers and skids is all though well defined.

An hacker unable to code which should not be called a script kiddie knows what he's doing, how he is doing it and what's behind what he's doing.

A skiddie looks at what the afore-mentioned hacker does and tries to imitate it at its best, without the knowledge the hacker has, resulting in free damage for others and himself.

Should a skiddie be anyhow called a hacker? I wouldn't say so, but if you go deep in the real definition of "hacker", you might have to say he is still a hacker. Being it the lowest form of hacking example shouldn't take from him the "hacker" title. Skids, don't however surely deserve to be called so.

So, a skid doesn't deserve any respect, a hacker deserves the title, a coder/hacker self-contained (codes his tools) deserves all my respect.

Don't ever forget that half of what you need to learn you take stealing. Somewhere you'll need to learn, from who already discovered something new; you might then be able to discover something new yourself, having some basis others gave you, and give basis for the developers of tomorrow.

RE: From Script Kiddie to a Hacker - A Comprehensive Guide for the Misguided - Ex094 - 06-08-2013

(06-08-2013, 04:39 PM)noize Wrote:
Quote:I've read the definition and I know it, that is why I mentioned cracking is the illegal side of Hacking but still for me Hacking is not Cracking and believe me those methods are not hacking, Why? Read the Hacking definition. But here's the answer for you, Hacker (or Cracker as you say) use tools coded by himself and exploits, cracks etc using them but we are using stuff that others have made which is not even close to Hacking.

The second thing is that the tern Hacking refers to something more complex, Read the book I mentioned. Breaking passes for twitter accounts is not that complex as they don't require Complex, so that’s the second point for that things not being Hacking.

Also I don't say Pentesters are not Hackers, A Hacker would be a complete word to define them all and to be a Hacker you need all the skill but the question is "Do you have alll the skills?" and finally "Are you a Hacker?" That is why I've differentiated between the individuals.

Hacker is a Collective term

I agree. Hackers who really deserve respect are the ones who code their tools by theirselves. Though, (this is what I get from what you say, hopefully this is what you really meant) you're saying that hackers who don't code their tools by theirselves shouldn't be called so (<quote>use tools that others have made and this is not even close to hacking</quote>). The border line between this kind of hackers and skids is all though well defined.

An hacker unable to code which should not be called a script kiddie knows what he's doing, how he is doing it and what's behind what he's doing.

A skiddie looks at what the afore-mentioned hacker does and tries to imitate it at its best, without the knowledge the hacker has, resulting in free damage for others and himself.

Should a skiddie be anyhow called a hacker? I wouldn't say so, but if you go deep in the real definition of "hacker", you might have to say he is still a hacker. Being it the lowest form of hacking example shouldn't take from him the "hacker" title. Skids, don't however surely deserve to be called so.

So, a skid doesn't deserve any respect, a hacker deserves the title, a coder/hacker self-contained (codes his tools) deserves all my respect.

Don't ever forget that half of what you need to learn you take stealing. Somewhere you'll need to learn, from who already discovered something new; you might then be able to discover something new yourself, having some basis others gave you, and give basis for the developers of tomorrow.

Yes but its not about respect, It's about being the one, A Hacker deserves the total title but what I wanted to tell people was that You can't call your self a Hacker just because you can crack accounts or you can speak l33t. You will have to master all the aspects of hacking in order to become. About the Script Kiddie thing, I disagree! This is the part where most people get afraid to be called so, but a Script Kiddie has the ability to learn more and gain more knowledge. Who knowns he might become a Hacker. Infact we are all script kiddies, Are we not?

RE: From Script Kiddie to a Hacker - A Comprehensive Guide for the Misguided - chmod - 06-08-2013

Agreed no one knows everything and anyone who says they do is either lying or hasn't got the faintest clue nice thread by the way Smile

RE: From Script Kiddie to a Hacker - A Comprehensive Guide for the Misguided - noize - 06-08-2013

(06-08-2013, 05:08 PM)Ex094 Wrote: About the Script Kiddie thing, I disagree! This is the part where most people get afraid to be called so, but a Script Kiddie has the ability to learn more and gain more knowledge. Who knowns he might become a Hacker.

Of course, of course. Never said a script kiddie will always be so. The fact is, that for now, he is a script kiddie, but many "hackers", in the beginning of their hacking carriers, are nothing more but skids.

Quote:Infact we are all script kiddies, Are we not?

Not everyone has been a script kiddie (of course, I'm sure you meant in our first approaches to computers' potential acknowledgement). If considering the definition we're talking about for a "script kiddie", I myself have never been a script kiddie, as long as I learned programming first and the first tool I ever used (of course I'm giving a few things as clear, else (e.g.) Chrome should be considered as a tool, that - I'll admit - I didn't code myself) was coded by myself. I think (may be wrong) that for @Deque it has been the same (mainly knowing her being keen on coding and not even considering herself an hacker).

RE: From Script Kiddie to a Hacker - A Comprehensive Guide for the Misguided - Ex094 - 06-08-2013

@noize Yes, you now have the points cleared! Smile