How to Hack - Part Two

misnar · 06-24-2014, 04:06 PM

Quote:Learn a programming language or two. PHP, MySQL etc. Don't just learn them and not know what they're for. Understand them. Find out how they fit into the world of hacking.

Quote:Research recon. This is the stage in a penetration test where you gather information and try to find vulnerabilities. This is why Kali Linux is such a good operating system, it comes pre-loaded with hundreds of tools that'll allow you to perform every part of a penetration test. Yes, you won't be familiar with these, but it's easy to learn. Google "Kali Linux Guide for Penetration Testers". Find a good eBook on Amazon and buy it! If you're a typical internet person, then go ahead and torrent it for free. You can also get other guides such as 'Metasploit Guide for Penetration Testers' etc. Familiarize yourself with the main tools in Kali Linux.

Quote:Aurora's guide on how to hack a site!

Browse to the site in question. No, not to Google, but rather to some old WordPress site etc.
Find out if it's running a CMS etc. Let's use a WordPress site as an example in this tutorial. To find out if it's running a CMS, view the source code > between the <head></head> tags. There should be a reference to whatever the site's running on.
Find out what version of it is running. Let's say 1.2.3
Google "WordPress 1.2.3 vulnerability".
Find a suitable exploit. Don't just copy and paste and then run it like a skid would. First understand it. Find out how and why it works.
If the version isn't vulnerable, or is too difficult to exploit, find plugins or other things running on the site and try to exploit them. You have to assess the site for attack vectors, avenues of attack.

this is why you're bad and aren't going to get any better until you understand why you suck.

How to Hack - Part Two
Author Message