Вы находитесь на странице: 1из 9

https://www.quora.

com/What-is-the-best-resource-for-learning-Ethical-Hacking

Learn Basics: Beginners who have little or no knowledge of hacking, it is always better to start with basics. Start exploring
more about topics such as computer networks, network ports, firewalls, common network protocols like IP address,
HTTP, FTP, DNS, SMTP etc. along with how each of those stuffs work.

Start using Kali Linux. Knowledge in linux is essential in the field of hacking. The more you learn about the basics, the
easier it is to find vulnerabilities and device exploits. Once you develop a basic understanding of the fundamental
concepts in Linux, you will be in a position to easily understand various hacking techniques that are in practice.

You can start learning hacking Wi-Fi’s as a start. Learn Brute Forcing and its applications

Playlists:

https://www.youtube.com/playlist?list=PL6gx4Cwl9DGBpuvPW0aHa7mKdn_k9SPKO

https://www.youtube.com/playlist?list=PL6gx4Cwl9DGCkg2uj3PxUWhMDuTw3VKjM

https://www.youtube.com/playlist?list=PL6gx4Cwl9DGC04FAovs0lswXTPXeomORn

https://www.youtube.com/playlist?list=PL67D94BE42620925B

II

If you want to learn ethical hacking you need a lot of things the basics will get you started. This list is what got me
started.

1. Learn about computer hardware


2. Learn more than one programming language: For this i would start with Python then move to something a little
more complex but do not push to yourself to much at once and to hard when you know some programming
languages move to Java then if you wish move to c its hard to give a complete list because ever hacker and
programmer is different and languages and syntax change a lot pick a language you like do not study one you
hate just because your friends say that all hackers know that language and its awesome pick a language you like
and learn it learn more than one if you can you should be able to program in multiple languages Python is
becoming a very popular scripting language Just in case you did not know A Scripting Language is a language
such as Bash and Python to automate tasks such as network analysis.
3. Learn a little bit of a native scripting language on your OS this could be Bash(Linux) PowerShell(Windows) this
will be useful for scripting tools to be used for your system or the ability to script a backdoor in python or
powershell depending on what is installed on the system if your target is windows then powershell is going to be
installed and Bash will be useful for a Linux machine automating a script to copy files download a script for post
exploitation from a Exploit database or compiling a file uploaded to the computer or server via something like
FTP(File Transfer Protocol)whatever you can come up with or to script a tool you found a exploit for or fixing a
broken or outdated tool.
4. Be Creative. Creativity is required to be a hacker because as defenders of a network are coming up with new
defenses to protect there systems you as a hacker need to find ways to change the ways these systems work
and need a way to figure out how to upload a shell to that Box
5. Learn some Computer Networking. Learn things like ARP, Firewalls, NAT, DNS, Subnet, DHCP, IP OSI model,
TCP/IP TCP UDP HTTP HTTPS etc.
6. Learn about types of attacks like 0days Phishing MITM File inclusions Buffer overflows etc.
7. Learn some reverse engineering this will help in understanding code and changing the way a program works.
8. Never give up. No one starts out perfect they start as amateurs and beginners.

III

If you are an absolute beginner, I would start by learning the Linux operating system first. There are a lot of tutorials,
books, websites, and more devoted to teaching you how to do this. Along the way, pick up Bash scripting, as it will go
hand in hand with Linux.

Next, you need to understand the basics of information security. If you start in the middle (Ethical Hacking) you are not
going to understand a lot of the theory and concept. So, start with something like CompTIA Security + or CASP. Here you
will learn a lot of security basics that apply to any environment.

You are almost there. Next, I would devote a measure of brain power to two individual study areas: the first is
Networking Essentials, and the second is Cryptography. These two knowledge areas will teach you the basics that you
need to understand about how information moves from point to point. Without that understanding, you will never
understand the best ways to capture data and how to unpack it when you do.

YouTube, Udemy, Cybrary, and more have free and low cost tutorials on these subjects. There are sites that offer free
practice test questions. If you think about your journey as going through a series of certification preps, then your
knowledge will cascade from the basics to the intricate. You will also discover along the way that the rabbit hole goes
deeper than you could imagine right now.

Don’t join any of the courses anywhere. Everything that you need is available online and that too free of cost. Its just a
journey of finding out the correct resources and the correct people which will help you to become an Ethical hacker.

Also Lot of people here mentioned using RATs and all. These are tools that belong to a category called Cracking. Using
such a tool is a waste of your time and these things don’t really work 90% of the time and do not contribute to your
learning.

Let me list out some things that are necessary for an Ethical Hacker.

Really clear knowledge of computing concepts . You need to better than any other programmer. Concepts like OS , Data
structure are all very essential. Your Source to gain them : BTech or BS or BCA degree

A interest in Problem solving. If you love maths then that is huge bonus because the better you get the more maths you
need. Hacking is about finding problems and then solving them.

Patience and perseverance . Cyber security is an Challenging field and these virtues will help you throughout your
journey.

Programming Practice - You need to be a programmer first and a hacker second because a hacker needs to know the
mind of a programmer to learn to exploit his programs .

If there are any school students from India then Amrita University is conducting an contest in Ethical Hacking which you
can participate in Amrita InCTF Junior - India's first high school hacking competition

Others can try out http://picoctf.com .

IV
First of all, there is no such thing as “Ethical Hacking” or people called “Ethical Hackers”. People who say they are ethical
hackers are usually shams. What you do have are:

White Hat Hackers: These people work for organizations, governments and security agencies and deal with mostly
defensive side of security. (firewalls, IPS, etc.)

Black Hat Hackers: The criminals, the ones who infiltrate other systems and take what they want. They are the smarter
ones and they are always ahead of the good guys.

Grey Hat Hackers: They are mostly vigilantes or “hacktivists” (as many people like to call them). Think Anonymous.

You need to decide which side are you on, but that comes later. First, you need to know how to hack. As you go on your
journey, you will know which side you are on soon enough.

I refrain from saying I am a hacker, the reason being that I simply do not have the expertise that hackers have. Hackers
are special people. They know and understand computers, networks and systems in a way normal people cannot even
fathom. To be a hacker, you have to be genuinely interested about computers; scratch that, you have to obsessed about
computers. You need to have genuine eye for details, for what is between the lines. You also have to be putting
enormous effort to attain that level of expertise. Most black hat hackers are extremely gifted and are obsessed with
computers. They attain expertise from quite a young age. It is going to take me years before I come to their level.

There are plenty of websites where you can learn how to hack. But most of them just teach you how to use tools and
software. In the end, you will just end up being a script kiddie- a wannabe, someone who does not actually understand
what is going on.

There was one online course which I liked very much, that was Zaid Sabih’s “Learn Ethical Hacking From Scratch -
Udemy”. This course will teach you the basics of penetration testing, reverse engineering, even social engineering. It is
up to you to build on that, to go and test and break systems. Practice is key.

However, the best way to learn how to hack is to be genuinely interested in it and and put in years of blood, sweat and
tears.

It’s great if you want to learn hacking. The world’s software is currently not very secure. We need many hackers who will
hunt for software vulnerabilities so that the owners of the systems can fix the vulnerabilities.

Start by creating your own hacker account on HackerOne (Bug Bounty, Vulnerability Coordination). This will give you
access to vulnerability disclosure and bug bounty programs on which you can test and hone your skills. As you make
progress and improve your hacker score, you will get invited to more demanding bug bounty programs.

To learn, read everything on the topic you can find. Perhaps the greatest learning comes from vulnerability reports
submitted by other white hat hackers. You find them on the Hacktivity list (Latest Security Vulnerabilities Found,
Rewarded, or Disclosed).

HackerOne also publishes blog postings (Latest Updates and Insights About HackerOne) with tips and techniques for
hackers. Many white hats have Twitter accounts and blogs, sharing their learnings with the world. Read and study as
much and as often as you can. If you prefer video over written text, go here: HackerOne.

A great book to read is Web Hacking 101 by Peter Yaworski (Web Hacking 101 by Peter Yaworski [Leanpub
PDF/iPad/Kindle]). Another excellent resource is Google’s Bug Hunter University: Bughunter University.

Starting from the first vulnerability report you submit to a program, you are helping to make the internet more secure.
Have a look at the list of best websites to learn Ethical hacking.

Eccouncil-CEH Ethical Hacking Course

CEH which stands for Comprehensive Ethical Hacker. It provides you comprehensive ethical hacking and network
security training courses to learn white hat hacking. You just choose the hacking course package and join to get trained
to become a professional ethical hacker.

Hack a day

As the name tells, this website is promised to give you hacking tips and tricks, tutorials on a daily basis. So each and
everyday, this site serves you fresh hacking guidelines which sounds kinda cool! If hacking is termed as a diamond, they
just polishing and respecting it. I mean ethical hacking.

Hacking Tutorial

This website strongly gives you ethical hacking tutorial which is much liked by the engineering students as well. It
provides you hacking news, ethical hacking tools and tips & tricks considering hacking. Some of the hacking blog posts in
this website are "5 Steps Wi-Fi Hacking – Cracking WPA2 Password", "Hacking Facebook Using Man in the Middle
Attack", "Shutdown Windows 7 Remotely" and so on.

Evilzone Forum

Evilzone is a hacking forum which welcomes the hackers to take participate in their community. Here you could see tons
and tons of questions and answers regarding ethical hacking. So, you will need to register to get your ID to raise your
questions there. Professional hackers will post solution to your queries. The community people are very serious and so
don't be a kid in asking simple hacking tricks.

Break The Security

Break The Security is one of the leading IT Security News portal. It delivers latest news updates related to information
security, hacking, malwares, vulnerability , spam and scams.

It extradites ethical hacking courses which you will surely find interesting and useful articles.

Hack This Site

Hack This Site is just another forum but it is completely free, safe and gives you legal training ground. In this community,
ample of project development are active. So, users can discuss hacking, security related questions. Their authors are
readily available in replying queries with much feasible. Not only this, they also provide vast variety of articles which
supplies ethical hacking tutorials.

SecTools

SecTools which means security tools and this site is dedicated to deliver important tricks regarding network security and
so that you could learn to fight against the network security threats. They also provide security tools with detailed
description about it.

Hack In The Box

Hack In The Box is a popular website in providing security news and happenings from the hacker underground. You can
get enormous hacking articles about Microsoft, Apple, Linux, Programming and much more. This site also having a forum
community and hence users can discuss hacking tips.
Happy Hacker

Happy Hacker guides to get harmless hacking tutorial. This site gives you the fundamental knowledge about hacking. It's
really a cool site to learn "Kernel hacking", "Fun with firefox", "Satellite hacking", "Ethical computer hacking", etc and so
on. Beginners were always welcomed here to learn the basic hacking techniques.

Hacking Loops

Hacking Loops is one of the ethical hacking websites where you will get numerous articles on white hat hacking. Each
articles in this website is seems to be very interesting and I'm sure you too will. Some of the cool posts in this site are
"How to stop virus or trojan attacks", "Game ranger hack for range of empires", "Facebook smart status update tool",
and so on.

Explore Hacking

Explore Hacking is a site which wants the users to know the importance of information security. I think this website is
great for the beginners because this site is very keen on providing lower level to higher level hacking tutorials with fine
screenshots. So, that's the most useful key for the initial level hackers to learn complicated hacking methods quickly.

Learn Hacking

Learn Hacking is completely a Ethical hacking tutorials providing site which covers entire topic from the beginning. It
covers topics such as "Hacking Windows OS" (whether it is Windows xp/Vista/7), "Virus hacking",etc and vice verse. This
site is also has a forum included in it.

Packet Storm Security

Packet Storm Security allows you to realize the security related vulnerabilities all over the Internet. It gives you the
tutorials on how to find those vulnerabilities and attack them before they just started to attack. If you expert in software
exploits, then surely you are going to get paid from them. You just need to submit such unique exploit to them and get
the fair offer.

Metasploit

Metasploit website gives you news and hacking tips related to information security. Most of the articles furnishes on
how to be secured at online. They also supply Metasploit software which is a popular Penetration testing software which
helped many to improve their security at online. One thing is that, the software is free to download. Also Pro version is
available with 14 days trial pack.

Backtrack Linux

Backtrack Linux site offers you to get Backtrack software which is also a popular and powerful Penetration testing
software in which every hacker knows it well. It is a Linux based penetration software that aids security professionals
which is capable of performing appraisal & judgement and is solely dedicated to hacking environment. Also this site
provides how to guides tutorials and downloads.

Hell Bound Hackers

Hell Bound Hackers is a famous ethical hacking website which acts like a security guard tutor. This site covers almost all
the security related problems with solutions like programming, encryption, cracking, etc. Simply this site called as
security trainer. The theme of this site is awesome too.

From DEV

FromDev is not a ethical hacking tutorial website but it suggests you to get the latest hacking tutorials from various
websites. So, this site is rich in collecting and proving links to so many posts (like what I did in this post) which teaches
white hat hacking tutorials.
https://leanpub.com/web-hacking-101

VI

1.Hacking: The Art of Exploitation, 2nd Edition

This hacking book is a must read for beginners. This book focuses on many common obstacles people face during
beginning of the ethical hacking job. This book can help beginners do their job more efficiently.

This is one of the best books which will take you through the technicalities of areas like programming, shell code and
exploitation. Regardless of whether you are a beginner or have very little hacking knowledge, this book will help you
understand the complexities of the digital security tasks.

This excellent and well written book will make you learn all the clever stuff of getting access to a system. All in all, the
best book to buy.

2. The Basics of Hacking and Penetration Testing: Ethical Hacking and Penetration Testing Made Easy (Syngress Basics
Series)

The best thing about this book is that it covers all the basics of penetration testing and hacking, without assuming that
the reader has any prior hacking knowledge. It provides a step-by-step journey of penetration testing, moving from
Information Gathering to Scanning, Exploitation and finally, Report Writing.

Instead of dealing with individual concepts in-depth, this book will provide you with a wholesome picture of hacking.

3. Metasploit: The Penetration Tester's Guide

This book deals with Penetration Testing by making use of the open source Metasploit Framework testing. It is suitable
for readers who have no prior knowledge of Metasploit. The tutorial-like style of the book makes you learn things by
doing them.

The ending of the book provides you with an actual penetration test’s simulated version so as to provide you with a
realistic experience.

4. BackTrack 5 Wireless Penetration Testing Beginner's Guide

Right from the beginning, this book gives you what you need, without wasting time in unnecessary justifications. Instead
of explaining only theoretical concepts, the book consists of finely tuned and crystal clear tutorials. It provides a good
mix of basics and high level knowledge and works cohesively with the reader.

5. CEH Certified Ethical Hacker All-in-One Exam Guide

This is undoubtedly one of the most well written books of all times. It provides crisp and clear writing with relevant
examples along with a humorous touch to enliven the dry and mundane subject. The contents of the book are well
organized in a neither too chatty nor too dry manner. However, you require some basic networking background to
derive full benefits from this book.

6. CompTIA Security+: Get Certified Get Ahead: SY0-301 Study Guide

This certification book is easy to read, straightforward and explains some of the complex topics in an excellent manner.
All you need to do in order to pass the test is to read the book and do the practice exercises.
In addition to this, the “remember this sections” and the content headers highlight all the key topics that one must pay
attention to. So, if you wish to straightaway get down to the study material without wasting time on esoteric gibberish,
this is the book for you.

Although, hacking may sound like an interesting area of study, when it comes to the application of the various concepts
of penetration testing, it is easier said than done. In addition to having an educational background in the field of
computer science, the hackers must have an affinity to learning and acquiring new skills on an ongoing basis. Also, the
ethical hackers must possess out-of-the box thinking so that they are able to come with maximum number of possible
ways of designing and securing a computer system.

https://www.youtube.com/playlist?list=PLBf0hzazHTGOEuhPQSnq-Ej8jRyXxfYvl

https://www.guru99.com/ethical-hacking-tutorials.html

https://www.youtube.com/playlist?list=PLWPirh4EWFpEK7BXbMvKDYuHhA4AiYLDb

https://ethicalhacker365.blogspot.com/2019/03/top-5-ethical-hacking-courses.html

VII

Get friendly with any LINUX operating system.

I recommend to use Kali Linux as it has 1000 of the tools preloaded in it. It is the mostly used OS used by the hackers for
P*netration testing.The best thing about Kali Linux is it is free of cost open source and user-friendly.

2. Good Source for Learning

Hacking is not a small topic it is a vast topic so you have to find a good books which can solve your doubts.If you are a
newbie, there are some books taht you can start reading at beginning

“Hacking Secrets Exposed”

“Hacking: The Art of Exploitation, 2nd Edition

CEH Certified Ethical Hacker All-in-One Exam Guide

3. Learn programming languages

If you really want to start hacking like an Elite hacker then programming languages are important to know. If you have
the knowledge about programming language then you can make your own tools and find out the bugs/flaws in any
program. It is better to have some basic understanding of programming languages like Python,HTML PHP,JavaScript. It is
good to start with HTML as it is easy? to understand.

4. Practise Practise and Practise

There is a great saying that “practise makes a man perfect. Try to implement what you have learned. So the more you
Practise the faster you learn.

5. Learn online

There is a lot of material you can find on Internet and start learning. You can watch online learning hacking videos on
YouTube and free of cost.
6. In conclusion I will say you that for learning hacking you need to know your goals. Try to track a single goal till
accomplished before you move to next one. And in last don't waste your knowledge and become a Black hat hacker.
Always work legally within the laws and use your knowledge to help others.

https://www.youtube.com/user/TrainSignalInc

VIII

There are a lot of resources online which you can follow to learn about security domain. Few of them are

Cybrary – Online Cyber Security Training, Free, Forever, Learn the theory from Cybrary and then proceed to Exploit
Exercise which will teach you from the basics

Exploit Exercises This website includes the way to proceed from beginner to advanced through 4 exercises. These four
exercise will take you from the known common vulnerabilities that had occurred in past and will give you hands on
experience

[PentesterLab] Learn Web Penetration Testing: The Right WayPentester Lab will give you hands on experience about the
Web Penetration Testing These also will give you knowledge about the past vulnerabilities occurred in past and how to
exploit them

Vulnerable By Design ~ VulnHubThis contains various old and new virtual machines which contain certain type of
vulnerabilities (old or new) which you have to exploit.

The Cryptopals Crypto Challenges: Learn to implement and break the cryptographic algorithms by yourself.

All about CTF (Capture The Flag)This website is to practice live Capture The Flags (Hacking Competitions) regularly.

[WeChall] About WeChallThis website includes all the other website that contains challenges for you to solve. I can’t list
all of them here.

Learn from Hackers Handbooks

Discuss with people on IRC and Forums

Go for OSCP and OSCE after you master these things Offensive Security Certified Professional and Offensive Security
Certified Expert (OSCE) Certification

IX

There are many courses for everyone. Beginner/Intermediate/Expert like:

For Beginners:

Comptia A+

Comptia Linux+

Comptia Cloud+
Comptia Security+

For Intermediate:

Cisco CCNA

Microsoft MCSA

Computer Hacking and Forensics

Penetration Testing and Ethical Hacking

For Experts:

Advanced Penetration Testing

Post Exploitation Hacking

Metasploit

Corporate Cybersecurity Management

Chief Information Security Officer (CISO)

This website provides everything you need to know…

http://www.hacking-tutorial.com/

http://www.hackinthebox.org/

http://www.hackthissite.org/

http://cyborg.ztrela.com/

http://cyborg.ztrela.com/category/tutorials/

Вам также может понравиться