• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Where can I learn to 'hack'?

Page 2 - Seeking answers? Join the AnandTech community: where nearly half-a-million members share solutions and discuss the latest tech.
Sounds like this guys another bored 13 year old thinking he's gonna be hot shit on the internet.
 
Here's your first lesson.

You need to understand sockets from a programming perspective. You need to understand sending commands via the protocol you want. At the very start you will have to understand how network communications occur and the bits/flags/layers involved.
 
Basically, learn how to program in whatever language the thing you're trying to hack is written in.

Figure out what the weak points in the system are likely to be.

Attack said weak points.

When it comes to websites, one typically looks at the input the site takes and sees if they can pass malformed values to gain unauthorized access. For example, for a number of months the AnandTech Forums had an RSS feed system for forum categories. It did not validate the forum ID # passed in, and thus people who knew the forum ID # for the moderator-only section could view topics in that section.

Google "SQL injection" and "cross site scripting".
 
Originally posted by: spidey07
Here's your first lesson.

You need to understand sockets from a programming perspective. You need to understand sending commands via the protocol you want. At the very start you will have to understand how network communications occur and the bits/flags/layers involved.
Click to expand...

Yeah, to be a "spook" and not be able to tell anyone what your job is, or a guy who is interviewed on tv with his face all blocky and voice changed, you'll need to be an engineering/programming genius.

You'll need access to lots and lots of hardware. You can't just go resetting your cable modem hoping for a new ip address every time some site locks you out 😛
 
Originally posted by: BrunoPuntzJones
Originally posted by: spidey07
Here's your first lesson.

You need to understand sockets from a programming perspective. You need to understand sending commands via the protocol you want. At the very start you will have to understand how network communications occur and the bits/flags/layers involved.
Click to expand...

Yeah, to be a "spook" and not be able to tell anyone what your job is, or a guy who is interviewed on tv with his face all blocky and voice changed, you'll need to be an engineering/programming genius.

You'll need access to lots and lots of hardware. You can't just go resetting your cable modem hoping for a new ip address every time some site locks you out 😛
Click to expand...

😛 I do that for rapidshare with my DSL modem
 
1) Smash the stack
2) ???
3) Profit.


I had a small-ish assignment to exploit a buffer overflow vulnerability in a C program and then print my own message.
 
Originally posted by: LoKe
Oh, and based on your question, you want to learn how to crack. Don't make the mistake of mixing the two. Hacking and cracking are two completely different things.
Click to expand...

Amen.
 
Seriously...it's like places to race cars. No one tells really or the good sources dry up.

Back in the days right prior to the Great Hacking war before hacking made you part of America's most wanted, a dude called our house (It was around late 80's maybe...) and asked this question.

He was able to trace our connection and then access phone records. We wanted to learn more. My brother and I gave him a list of books/gfiles to read (as a joke, ones in our bookshelves on UNIX, x.25 networks, etc). Told him to call back when he was done.

Dude read them all and knew the crap hands down. Later became pretty skilled at figuring out some really cool stuff. When on to become a CTO of one of the original private ISP's, multi millionaire by 25.

Today there is really 99% script kiddies. No one really does great hacks anymore...it's hard to play though when you are looking at fed time for getting caught.

I pulled out of it right after both the FBI and AT&T had a family sit down with us.

You can search for cDc, Phrack, 2600 (which may have meetings in your city), etc.

You start outside the rabbit hole and work your way in.

Our biggest profit was a local phone bridge that was not on the record so no billing/auditing took place. It was a local call for us was where the N word comment was dropped to Corrupt by Eric Bloodaxe who thought he was SN.

In our day the big places were tchh, altgiers, lutzifer, QSD...

Hacking is like Engineering or Medicine...you need to pick a niche to focus on.

Figure out something really good and get hired for big $$$.
 
Originally posted by: LoKe
Originally posted by: RESmonkey
I want to get a program that...you know, is used to generate possibilities of passwords, etc. How are some infamous hackers able to just guess the password in a few tries (I'm referring to the whole torrentspy thing that happened).
Click to expand...

Brute force bots that use rainbow tables? Mind you, you'd need one that offers rotating proxies or you'd be IP banned within a dozen or so attempts (on any worthwhile websites, anyways).
Click to expand...

In reality much of the times the easiest thing to do to get a password is to get to know someone or get physically onsight. Too many people have there passwords as something related to them or written at their desk.

Those that manage systems of old got to see plain text passwords and learn what people were using...once you had a list of the top 10 or so and knew the naming conventions for accounts it was a matter of just working a list.

At that time we weren't out to break stuff though...just get time on a machine that we normally would not have access too.

Today people get in and think it's fun to delete stuff.
 
Originally posted by: alkemyst
In reality much of the times the easiest thing to do to get a password is to get to know someone or get physically onsight. Too many people have there passwords as something related to them or written at their desk.

Those that manage systems of old got to see plain text passwords and learn what people were using...once you had a list of the top 10 or so and knew the naming conventions for accounts it was a matter of just working a list.

At that time we weren't out to break stuff though...just get time on a machine that we normally would not have access too.

Today people get in and think it's fun to delete stuff.
Click to expand...

Too true. However, a simple dictionary list would do just as well in the case of weak passwords. But like I said, usually those places aren't worth getting into. And the art of hacking isn't about passwords, it's getting in through a technical way. Guessing passwords is worthless, and helps no one. The whole point is to get in and explain how.
 
You must log in or register to reply here.

TRENDING THREADS

Back
Top