(sigh)I'm kind of tired of this...

Alright. Whenever I try to find some kind of way to learn how to hack, I always get the "ABOUTS" on the subject. The books I try to read... 'I will only tell you the basics so you can be on your way...' WTF!
What I am looking for is the step by step guide to doing this stuff. I have a small network. My main man (computer) is my laptop with Wi-Fi, and XP. I would really like to practice. Teach me something. I hear the people and websites and books say that DoS, spoofing, interception...etc is HOW they do it. BS. The word how is what I expect to tell me the details. So start me off. I've been trying to learn this stuff since I was 15. All the resources tell me the same thing. (sigh). I would prefer doing this stuff for the government or some buisness one day instead of being in a cubicle typing out paperwork for agendas. If you aren't comfortable replying out the open to this post then please pm me.
Thank you for your time,
Sam L. Fisher

You need to learn it, because you need to be aware of the cause and effects of such activitites. Plus every system is different you can't just say do step 1, 2, & 3 and your in. This is a very immature way about it. I suggest you start cracking some books and clicking away at some sites or you won't learn JACK!

Well how about taking this old skool approach....

1) Learn exactly how something operates under normal conditions. This is easier said than done.
2) When you completely understand how something operates, see what happens when you attempt to use it in ways not intended.
3) Document your findings when it behaves in ways it should not.

Congrats. You are on your way to discovering and documenting exploits/bugs.

As a side note, if step-by-step guides are what you are looking for, perhaps this site isn't the exact right place for you. Step-by-step guides have not been seen here in eons.

--TH13

You seem to be approaching this vast subject from the wrong point of view - you want to learn it all right now. Forget it, most of the most able here have spent many years learning all the different facets of the subject. The first thing you really need is to understand how a network _really_ works and an operating system of your choice. Without that basis of knowledge everything will pass you right by.

Then you need to begin with the small steps. The first thing to realize though is that if you have nice gleaming fully patched systems on your network then most of the small steps won't work because they have already been patched. You need to install a base system and not patch it. Then try a little NETBIOS hacking for example... Once you get the hang of that you can move on up to the more complicated ways of gaining access.

As you build from the "lesser" techniques that are well documented on the net you will find the documentation for the more advanced stuff easier to find.

Just make sure you have full permission to use the techniques on the boxes you do, otherwise your life could become very unpleasant.

DoS: There are tools for DoS all over the place. Also you might be interested in DDoS if you are looking to take down a bigger web site. The tools are available for a number of operating systems. Looking on Google for you, I have found some stuff:

http://security.royans.net/info/post...aq_ddos4.shtml this runs in *NIX. Includes a make file and is all done for you. Read the header on how to compile it.

http://data.uta.edu/~ramesh/cse4392-5392/DOS.html this is pretty explainatory.

spoofing- That's a big subject. What kind of spoofing? Somebody can spoof a web site and call it real to steal your credit card numbers. Some spoof IPs to bypass firewalls. The list goes on and on. Okay, I looked on Google (There's the magic URL again) and found these:

http://www.linuxexposed.com/internal...rticle&sid=550

That may be useful. Maybe not. To spoof a website to steal credit card numbers from unsuspecting saps, make sure you make the site look just like the real one, and send out e-mails asking people to "verify" a credit card number. Sould be easy enough, and watch the money roll in... jut do not let the cops catch you.

interception: You mean packet sniffers? There are a lot of packet sniffers. http://www.ethereal.com/ comes to mind. Also, do not forget your handy-dandy nmap to scan hosts. Oh, you may want the URL to that as well: http://www.insecure.org/nmap/

Here is the moral of the story: Nobody is going to hold your hand. You need to research yourself, use Google. Use your head. Learn to ask the right questions. Take a class. Slow down because you need to learn to crawl before you can fly. Blah, blah, blah.

Testing vulneralbilities on your own network or whatever setup you have is a good idea, and there is plenty of ways to learn about it. Step by step. there are a lot of automated tools to check for network holes, and other ways to protect yourself. Look around. It IS there. The problem is, it is not in just ONE book as we all want it to be. If it were that simple, everybody would be an expert.

Sadly. I am not one of them. Ah forget I said anything in this post.

A good place to learn basics on webhacking for example is doing the missions @ hackthissite.org.
But do not try to do the missions to impress people. If you get stuck google and read on the subject while you have a good playground to test things, since its legit there. I found that a very nice and playful way in learning some basic techniques.

Oh and you might wanna learn the OSI and TCP/IP - models first ....

Greetz,

I think hollywood is to blame for most of these types of questions. Movies like wargames/hackers/swordfish/The Matrix (all great movies) make it look so easy. Point and click with some cool Gui.

Hacking is not just knowing how to use a packet sniffer or run a DoS on a site. Hacking is what you know. Can you make the computer do what you want? Do you have an understanding of more than one OS/programming language? If so your already becomming a hacker.

I too have spent every minute I have to spare on computer since 15. I am now 23 in those short years I have learned that most "Hackers/Crackers" who say they are "elite" so to speak. Are simply script kiddies running programs designed to do all the work for them.

With that said, there are several REAL hackers out there. A good system admin is a hacker, a software engineer is a hacker.

If you want to know how to break into computers you do not own, run DoS attacks against random sites or cause damage to what someone has worked hard to create this is not a hacker. This is not even a black hat hacker. I call these types Flackers. (Fake Lazy Hackers) Simply put people who can click "Run" but can not find out what is really going on.

If you want to be a real hacker like everyone has said read, read, read. Forget those "Hacker secrets revealed" books, those are trash. Check http://www.oreilly.com/ for some great books on networking, linux, unix, tcp/ip. These books are hacking books.

Quote:

---

Originally posted here by Donkey Punch
DoS: There are tools for DoS all over the place.

---

This is the perfect way to become a skript kiddie. By the way, being told how to do something is just as bad. You don't know what your really doing, your just following someone elses directions to see what happens.

What a lame way to go about it. Why don't you just pick up the next issue of Blacklisted 411 and educate yourself.

Quote:

---

If you want to know how to break into computers you do not own, run DoS attacks against random sites or cause damage to what someone has worked hard to create this is not a hacker. This is not even a black hat hacker. I call these types Flackers. (Fake Lazy Hackers) Simply put people who can click "Run" but can not find out what is really going on

---

Uh.. there is already a well known term for these types: script kiddies.

A step by step guide to the netbios hack is attached.

It's not my work and I can't remember where I go it from...............It's bloody old.

But as per Tiger sharks post, some place to start. :cool:

and an up yours to The horse :D

Quote:

---

This is the perfect way to become a skript kiddie. By the way, being told how to do something is just as bad. You don't know what your really doing, your just following someone elses directions to see what happens.

What a lame way to go about it. Why don't you just pick up the next issue of Blacklisted 411 and educate yourself.

---

Yes, I'll remember that next time.

boo hoo.

Besides, didn't he say he was going to use it on his own network? haha, you people forget very quickly and start yapping: "This is a security site! What are you doing? yadda, yadda!!" Simple. If you do not know what crackers are doing, how the tools work and whatever, then you will NOT know what is going on. If you remember, JP did have those kind of tools for people to look at here which AO was founded on. Knowing what your enemy does.

You know, there is NO use explaining this for the nth time. I'll continue what I do.

I do agree that in order to fight the enemy yo have to know them. But the majority of tools skiddies use are just GUIs that run a series of commands instead of the person actually having to run the commands. they use exploits that are usually well known (or will be well known after the tool is spread), so in truth, we dont need to know the tools. we need to know the exploits they are using, or how they are conducting the attack. this is the root of "hacking" skiddies dont last becasue they dont know what the tool is doing, so when it doesnt work or something changes they are screwed. post links about relavent info, like the oriley books linked above, those are very good. they will teach what the tools do and how to hack, not how to click a button in a window and calling your self 1337.

You can't even begin to learn hacking until you acquire some other skills first. (Speaking as one who is by NO means a "hacker" yet.) For starters, you need to know:

1) Programming
2) Networking

If you're not pretty darn proficient in both of those, my hunch is you're not even ready to ask how to begin hacking yet.

What I'm doing presently is burying my head into a book on TCP/IP networking. I picked up the manual on the TCP/IP MCSE exam and have already learned a ton of stuff from it, and what I've learned has given me more insight on how attacks such as ARP flooding, DOSing, and various others work.

Think of hacking as a graduate course. You have to get your bachelor's degree first, and that's learning how the insides of that computer of yours works.

There was a moral to the post. If you want to know so badly, use google. It amazes me how many people ask for help on these subjects and just do not take the time to look it up. Granted, some people do not know how to ask the right questions and do not know where to even start. In that case, it is not a good idea to even look up google and learn the very basics first.

MsMittens has a class about security, and she sees all kinds of people of all levels. Perhaps this person would benefit from asking her how to find a good place to start. Lastly, even in a class, the instructor (or a good one) will not hold your hand either. They will give you a problem and teach you how to ask the right questons and solve practical problems.

As for the kiddie tools I listed above, it was tongue in cheek, but I guess people do not know satire if it hit them in the face. In that case, that is not my problem.

In reply to stupid question:

Quote:

---

(sigh)I'm kind of tired of this... posted Today 10:56 AM
(post #1)

Alright. Whenever I try to find some kind of way to learn how to hack, I always get the "ABOUTS" on the subject. The books I try to read... 'I will only tell you the basics so you can be on your way...' WTF!
What I am looking for is the step by step guide to doing this stuff. I have a small network. My main man (computer) is my laptop with Wi-Fi, and XP. I would really like to practice. Teach me something. I hear the people and websites and books say that DoS, spoofing, interception...etc is HOW they do it. BS. The word how is what I expect to tell me the details. So start me off. I've been trying to learn this stuff since I was 15. All the resources tell me the same thing. (sigh). I would prefer doing this stuff for the government or some buisness one day instead of being in a cubicle typing out paperwork for agendas. If you aren't comfortable replying out the open to this post then please pm me.
Thank you for your time,
Sam L. Fisher

---

How To Learn How To Hack 101:

- get an old PC
- install Slackware --> http://www.slackware.org/
- do not install X or GUI crap
- install all the networking tools
- read this --> http://www.catb.org/~esr/faqs/smart-questions.html
- then read this --> http://en.tldp.org/HOWTO/Unix-and-In...mentals-HOWTO/
- then don't ever come back to this site and ask such a question again. You will be gone for years and years.

p.s. Does this count as a tutorial? Can it? I need the points!! :-)

Quote:

---

p.s. Does this count as a tutorial? Can it? I need the points!! :-)

---

No, it does not count as a tutorial. It has to be your own and in the right forum. Also, asking for karma will only make others mad, so not worry. If you wanna know the basics, PM me.

Oh, never mind. You got some. :)

I have an AMD Athlon XP 2600 + with half a gig of RAM and Slackware 10 without a GUI running right now, does that mean I'm leet?

Oh I just found a bug in SUSE docs too! Damn man I'm going to be the next Dade Murphy!


EMC, watch your ass! The Mainframe is MINE!

Quote:

---

Uh.. there is already a well known term for these types: script kiddies.

---

Or "Anti-Online member"... but thats just too offensive.

I think just about everything that needed to be said was said but, I just had to inject a little humor in response to this-

Quote:

---

a software engineer is a hacker

---

True for everyone except cobol programmers (my old job).
We're not hackers, we're overly verbose clowns on acid that couldn't hack an atari if it came with instructions and a bolt cutter. :eek:

quickbasic rules <insert headbanging smiley here>

that's where I started learning about user input validation (and the lack thereof), you can deface almost every website if you master that ****

I know QB, but im way ahead of you oldies now, im learning *drumroll* Visual Basic, thats right, point, click and tpe some code...:)

I`m with TheSpecialist...

As for learning to "hack", start with TCP/IP illustrated Volume 1, and learn the wonders of TCP/IP...and dive into a coding language, Perl or Python are good fun and not too tricky.

neel, you love other people's PHPbb admin panels. So shut up.

/me changes his .htaccess to 777

have fun and have a Duvel

Sheesh, someone mentions kiddies and they all come crawling out of the woodwork. Special-ed is the new pied piper of kiddiedom! :D

Anyway, to really get a handle on the best way of breaking something, you need to know the ways its commonly put together. Frequently the best "hackers" (and I use the term to refer to the non-kiddie variety) are those who have at least the knowledge level of maintaining and administering systems. You'll probably find it extremely rare that those with that talent hit a certain age and opt to stick with it though, as what's a fun hobby when you're sixteen can make you some decent money when you're twenty, though operating on opposite sides of the proverbial fence.

Basically what I'm trying to say is learn how to build a secure network, and you will gain the knowledge to break insecure networks. This applies equally to other areas of high tech as well (ie: Software Development).

EDIT: By the way, why'd this guy get negged so hard? I mean, change the overtones of hacking to "security research" and I bet you $20 the post doesn't get hit so hard. Just because it's trendy to call a whitehat a "security researcher" instead of a "hacker" doesn't make it any different a job...

Just like Blow job and .... Well I guess going that road is different. But "I suck for cash" and "Prostitute" are the same thing.

I have 5, count them, 5 9s on my LAN.

If you ever get the chance to REALLY break something, do it on BSD, seriously it's funny when it crashes, it swears at you.

Quote:

---

some things can't be taught ,you needto learn them yourself
-yourdeadin

---

i guess thats my answer to yur question SamFisher_01

Like English.

I might suggest a good first place for you to start is to look at your own server, and how it is "secure", Behind a firewall? Ok, what ports are blocked, and why? What ports are open and for what purpose? Not behind a firewall? Ok, what happens when you connect to a share..?
If you DO try out some of the "scripts" out there, and for one reason or another they dont work, you have no idea why, unless you take the time to understand what it is suspose to do and HOW.

A decent book to check out is "Network Intrusion Detection, An Analyst's Handbook" By Stephen Northcutt (thanks Ms Mittens)

But honestly, it is hard to break something you have no idea how it works in the first place. Hacking is more about exploring how things work then anything else.

Quote:

---

Originally posted here by MrCoffee
But honestly, it is hard to break something you have no idea how it works in the first place. Hacking is more about exploring how things work then anything else.

---

|The|Specialist puts a trumpet up his butt then blows as he starts marching... fallow me, kids!

No no no... you've got it all wrong. That stuff they say about learning & exploration is bullcrap. Why explore? Well because its expected of you to do so... plus the more you pretend to know some crap, the more the other losers respect you. And THATS what its about. Its about keeping an image. I mean, your talking about a group of people who are so uptight about this image, this inferiority complex that builds up inside them, that they feel a need to label themselves something that sounds sexier than computer enthusiast or what have you.

I can understand where this person is coming from. I'm just starting out with infosec. It's very frustrating at the beginning when you can't do anything, you don't know where to start or even what to ask.

It is (or is going to be) a significant part of my job to perform vulnerability testing on our network. I don't know how to do that yet. I've bought some books and I asked my boss for some more PCs. I've now got 2 extra machines networked together and when I get some time I'll start to work through the books (network security assessment, O'Reilly is about as setp by step as I can find at the moment) and I'll start to learn.

I'm hoping sometime soon something will click, I'll have a eureka moment and then things might get easier. 'till then I'll just have to persevere. I think this will be much the same for you.
Get some books, get a network and put the theory into practice. Just reading isn't good enough for me it doesn't stay in my head that way.

*nods* amen here... I'm around the same level myself. Big scary computer world out there ;)

The thing that boosted my related general knowledge a LOT is forums like these... not posting, not asking, just browsing and reading.
I tend to only understand one post in five (or rather one explanation in five) but continual exposure eventually leads to an understanding of a particular facet.

Another excellent source for a continual flood of security-related information are mailing lists... my favourite is the pen-test list from securityfocus.

Before books or courses and even supplemental to online tutorials and whitepapers, I would recommend this as a speedy way of learning the whys and wherefores of security testing/hacking/label of choice.

I usually don't post(just a lurker) but thought i'd add this insight i came across.Back in my high school day's when i thought the Russian's were comin' i used to read a lot of burn n blow book's.You know,the kind that say take A-mix with B-shake well BOOM.It was fun to try some of those thing's,but i got to thinking"what if i didn't have B,but had something kinda like B.Would it still work?"So i started to wonder what was going on inside the IED,what was happening to A and B to get the boom.Maybe i could find a substitute B cheaper and locally made.Or perhap's i could make a type of B that would work in a pinch.That wonder led me to the local library and introduced me to a Mr.Pauling(author of a great chemistry book).After some learning (gasp!!learning the why not just the how) i began to understand what was happening inside my home-made devices.Which metal powder's would add strength without making it unstable.There realy was a difference between high and low explosives-funny thing,by the time i had the tech skill and knowledge to make a high explosive,i was smart enought not to ;)
But the journey was not traveled overnight,took me years of study.Along the way i came up with my own process to make Kno3( i think that's how you write it,been a long time).
Point is,me coming up with this myself was worth the hour's sitting at work reading chemistry book's.
Being older now and wiser,i leave the blowing thing's up to the guy's who get paid to do so.Still it is kinda nice to know i learned a lot by myself.Hacker? LOL no.
Just a guy who like's to drink some beer on saturday night and enjoy some pizza with it.
Peace Ratguy

Hacking in not a cram and play game like thing. It is a serious study more than a research
I (& hopeully everyone) knows what frustrates a newbie. And the approach u r taking is not the right one
See if u study maths in school then the teacher will teach u one or two methods and will then ask u to solve the problem. There will be some problems that will use just one method and some which will use a combination of two or three methods. The same way hacking goes first u need to know the basics i.e How does an OS work, Networking and then languages and a lot other techniques.
No one becomes a hacker in just a short time (Rome was not built in a day)
So asking as to tell me step 1 then step 2 so on.... wont take u anywhere because no two systems are alike so how many steps r u gonna ask
Better read such forums and tutorials on os and networking & programming
Then talk to people who r into security to know how they proceed

Slowly & slowly u will get clear with things and then new ideas will start popping up in ur mind..
And then only will u be able to apply indegenious techniques
Else u will even go lower than a script kiddie level

Never shy from WORKING HARD