[Boards: 3 / a / aco / adv / an / asp / b / bant / biz / c / can / cgl / ck / cm / co / cock / d / diy / e / fa / fap / fit / fitlit / g / gd / gif / h / hc / his / hm / hr / i / ic / int / jp / k / lgbt / lit / m / mlp / mlpol / mo / mtv / mu / n / news / o / out / outsoc / p / po / pol / qa / qst / r / r9k / s / s4s / sci / soc / sp / spa / t / tg / toy / trash / trv / tv / u / v / vg / vint / vip / vp / vr / w / wg / wsg / wsr / x / y ] [Search | Free Show | Home]

Looking to start in a hacking career. Have lots of experience

This is a red board which means that it's strictly for adults (Not Safe For Work content only). If you see any illegal content, please report it.
The stories and information posted here are artistic works of fiction and falsehood.
Only a fool would take anything posted here as fact.

Thread replies: 95
Thread images: 9

File: images.duckduckgo.com.jpg (171KB, 1024x768px) Image search: [Google]
images.duckduckgo.com.jpg
171KB, 1024x768px
Looking to start in a hacking career. Have lots of experience in programming and exploiting software and code. I know several programming languages. C/C++, C#, PHP, Python, Java/JavaScript, Objective-C and HTML/CSS. I just don't know where to start and in which direction to head towards. Can anyone help me?
>>
Hack the white house to test your skill.
>>
>>738048096
Thats the point. I can't hack. I want to learn how to hack
>>
If you actually know how to code you would already know the answer to this. Any half decent programming degree is going to teach you the things you shouldnt do... those are exactly the things you should be looking at
>>
>>738048013
hack your neighbours wifi
>>
Maybe big investment banks are easier targets. Even russian faggots wothout any knowledge and reliable tools are able to hack them
>>
>>738048168
I am a self taught programmer. Ive only programmed software, websites, applications. But ive never known how to get start or what "hacking" programs actually do. Plus I dont even know how to get to the dark web so... FML
>>
>>738048013
First you need to delete system32 and then save hackerman.jpg on your computer
>>
>>738048013
http://overthewire.org/wargames/

I got you fam
>>
>>738048517
Hold on while I get a load of my bookmarks
>>
>>738048441
dont have system32. whats hackerman.jpg?
>>
>>738048324
That scares the shit out of me that there is a company somewhere on this earth using a program you wrote without knowing the basic best practices and coding structure.

If you want a serious answer, watch DefCon videos on youtube.... not to learn 1337 hacks, but just try to understand what they are talking about and what their thought process is.

Oh its a 2 hour speech on packet header injection.... maybe packet headers are important for something
>>
>>738048658
you'd have to see some of my programs before you get scared. Im mostly working on hardware aspects and hacking them. Im finding more success in hardware hacking then actual computer or software hacking
>>
>>738048517
Don't understand what I have to do with this site
>>
>>738048658
This is how I got my first network admin job. I did 3rd shift tech support for a well known company. Password resets and printer reboots were my bread and butter. However during the dead times (which was 5-6 hours of each 10 hour shift) they encouraged us to read through their massive collection of tech writeups and whitepapers as well as play with "old junk" like Cisco routers and firewalls.

Long story short I digested everything there was to know about networking and cisco switches over the span of a year. The one night I was coming in and 2 level 3 guys were talking about a branch that had a switch port issue. I just casually said to try something and it worked. They both looked at me like I had horns on my head and that was when I realized.... holy shit, I actually know what I am doing
>>
>>738048658
Whats the exact video that you're referencing?
>>
>>738048013
xD if you know all this stuff and dont know where to start then you dont know shit.
>>
>>738048560
https://www.0xf.at/
https://www.exploit-db.com/

Can't find the main website I used to use, but search for wargames and practice hacking tutorials, there are a lot out there with varying degrees of difficulty. Eventually you are going to want to set up your own lab to get practicing on theoretical targets using virtual machines etc.
>>
>>738049396
are you a hacker?
>>
File: 1498685401308.jpg (35KB, 700x466px) Image search: [Google]
1498685401308.jpg
35KB, 700x466px
>>738048324
>doesn't know how to access the dark Web
Ahahaaaaa
Anyway, honeypot,
1. go download the tor browser ( 1st in Google botnet)
2. Run it
Congratulations, u iz now on teh darkwebz.

Optional:
Look for. Onion address for silkroad 2 or 3 or whatever the fuck is the current one.
Also there's the hidden wiki which contains....something. Probably. I tried lookung for it once, but found 5 sites all calling themselves the hidden wiki.

Of course if you REALLY wanna go full underground anomalous hacker mode, visit this: http://goatsehvcopyc2ex.onion/
>>
>>738049510
Already have Tor browser. Works the same as any other browser ive used but slower
>>
>>738049435
Would I be able to use these sits on a normal browser instead of using incognito or Tor browser?
>>
>>738049394
I wasnt talking about a specific video. All DefCon talks have a specific subject. You might not have any clue what they are talking about, but you will get a good idea of things you should learn about. In my example, packet header injection is pointless for you to learn unless you know details and specifics of packets, how they travel, how they assemble at their destination, what happens when they are disguarded, etc

Think of youtube as a pre schooler listening to a college professor. The talks for the most part will be way over your head, but they will lead an inquisitive mind to ask the right kind of questions.

That said, also know that large scale hacking is not for a single person. You need to specialize in something and then work with other specialists to achieve a goal. There is just far too much to know about programming, networking, and hardware to do much of anything important by yourself
>>
>>738049187
They are tutorials / old hacking challenges from competitions. You just have to get the password to unlock the next stage of the game. This can be in the form of cryptography, general command line usage, using common security mistakes and bugs, or combinations of all of them.
To jump into actual "hacking" just download kali linux, go through tutorials on metasploit, fire it up against a target and go straight to jail as you have no fucking idea what you're doing.
>>
>>738048013
Heres a check list that will guarantee you work in Cyber Defense:
1. Be a US Citizen
2. Have a clean background and be eligible for security clearance (no drugs, no crime, etc)
3. Obtain the CompTIA Security+ certification to meet DOD 8570M requirements
4. Obtain the EC-Council Certified Ethical Hacker (CEH) certification to meet DOD 8570M requirements
5. Go to security conferences and network. You will be hired practically on the spot, even without a 4 year degree or any experience or training.
>>
>>738049752
Nothing illegal about these sites, they just host hacking games / hacking "code golf"
>>
>>738049816
Thanks for the help. Im not really into big hacking and scandals at the moment. just small things. Im starting to like the hardware portion of hacking
>>
>>738048013
dailyinfographic.com/wp-content/uploads/2012/02/How-To-Use-Google-Search-More-Effectively-INFOGRAPHIC.gif

Maybe start with this
>>
>>738049860
Alright, makes sense. I got linux (but rebecca. will get kali soon) Ive only done a small DDoS on a live streamers account which worked for the most part. Felt good seeing the results
>>
>>738049976
Same poster, if youre starting from zero, get the CompTIA Network+ before the other two so that you have a basic foundation for networking fundamentals.

I recommend Sybex study guides for all three tests. For the CEH you will be required to take their iLearn course as well, which will teach you how to hack hands-on.

Sybex study guides are like 15-30$ each on amazon.
>>
>>738049816
>DEF CON
Skiddie central. Fuck off. Half the people at DC don't even know how to hack anymore it's sad

Go to DerbyCon if you want to actually see some skill

OP buy 2600 magazine and read it ya fucker
>>
>>738048324
You're so dopey and uninformed it's probably best you stay away from that shit
>>
>>738048013
>hacking career.
anon, I have sme bad news for you...
>>
>>738050573
continue
>>
>>738049860
I interviewed a kid for a PenTester position and a few minutes into it we start asking you to do super basic shit like "how do you add or remove users from a group in AD"

After opening his laptop and clicking for what seemed a long time to just log in I asked him what he was doing. I shit you not he said "Im running Kali on your network. After I break the Wifi Im going to run Nmap

At this point I thanked him for his time and while he was still so confused I pointed to the top of the paper he was given at the start... which had the wifi password and the target of some scans
>>
File: 1499192840356.jpg (72KB, 680x641px) Image search: [Google]
1499192840356.jpg
72KB, 680x641px
>>738049614
Yes, well, that means you're visiting webpages through tor. Tor is some routing encrypted antitracking quantum-entanglement protocol which makes you invisible to the man. So if you use the tor browser you're in the dark Web. What you're looking for is some dark Web sites. This is any site that ends in .onion You can find these using Google.or ask for them on reputable websites where would ever fuck with you. You know, like this one.
>>
>>738049976
>>738050252
OP, just do these. Google DOD 8570, and youll see a chart that outlines all the certifications that meet the requirements. If you want to work in cyber security or cyber defense, this id the route to take. With just those two certs you can make 80k, and if you get the CISSP later on or the OSCP you are looking at WELL over 100k.
>>
>>738048013
I'd start with reading the Art of Exploitation
>>
>>738050706
This guy knows what he is talking about, everyone else here is a neckbeard blowing shit out their ass
>>
>>738050667
Hahah no shit eh.

I live in an all Mac office. How do you add to AD? I did it once in college. Is it pretty self explanatory? I remember you had to set up a domain right?

Sry I am not a Windows admin. I only do Linux and osx :(
>>
>>738050667
Lol, being able to follow instructions is the basis of most jobs. I bet he fucking cried to his mates that you couldn't handle his skills
>>
>>738050321
This is a sad truth. There are times the audience has the same "right over my head" look that OP would have and some of them are paying thousands of dollars to be there (or at least their company is)
>>
>>738050706
>>738050836
Thanks for the confirmation. I am thinking of going into cyber security
>>
>>738048013
boards.4chan.org/g/
>>
>>738050882
Well that's where you fucked up.. Windows being 80% of the market share for personal devices
>>
>>738050971
A lot of people joke about cissp but once you make it into a company they will pay for your certs.. Its just good to have the basic ones going in. I am getting all my shitty ones out of the way now that im gainfully employed
>>
>>738050922
DC is just too popular for it's own good. I still go for my yearly trip to Vegas but tbh I just go to the parties, gamble, and make a fake badge once the shoestring badges start rolling out.

The talks are fine if OP wants to watch them, especially some from a few years ago, but it just sucks. That's why I don't pay em anymore and just fake the badge.
>>
>>738051108
Sorry. Fell into a well paying environment that's completely devoid of windows :/
>>
>>738050698
would it make sense to also have a VPN while surfing TOR?
>>
>>738051335
Do you know what Tor is?
>>
>>738050971
If youre already comfortable with OSI and your network fundamentals, go straight for the Security+. I used a Sybex study guide for it and passed on thr first attempt, 842/900 points. The CEH is more stressful and EC-Council is a pain in the ass to deal with, but the test isnt that hard. It does cost a LOT more money than the Security+ though. But if you go to a srcurity conference, a lot of companies will reimburse you for the certs IF you pass. This is called a contingent job offer.
>>
>>738051375
Yes
>>
>>738051400
Yeah CEH was boring and i haven't gone through SEC+ or NET+ yet but i am imagining more boring stuff
>>
File: 1496890441486.jpg (61KB, 400x533px) Image search: [Google]
1496890441486.jpg
61KB, 400x533px
>>738048147
You are a lying piece of shit, you don't know all those programming language and if you did and had the aptitude to learn any those learning to hack is the least of your problem.

Also most hacking is done thorough the "front door" , fuck with a public web page long enough you can access the parts the owners hope were secure. Another way to hack or gain a security entrance is human engineering, failing human security by gaining the trust of person working for a company getting past their security to gain what you want.
>>
>>738051232
Yep, thats why the CEH and Sec+ are great because they practically guarantee youll get in the door and the barrier to entry is low. Bigger stuff can come after.
>>
>>738048013
>HTML/CSS
>programming languages
You clearly don't know what you are talking about.. no way im helping you
>>
Hack valve and steal half-life 3
>>
>>738051232
Very true. Certs are for 2 things really. Getting your foot in the door for an interview and as old military guys call "fruit salad" in an established position.

A lot of the larger companies and even some VAR's not only pay for your certs, they pay you more if you get the certs. The VP of my old company had dozens and dozens of certs hanging on his office wall in everything you could imagine. The 2 that stuck out to me was a Comptia Healthcare Technology cert (we were NOT a healthcare company) and a PMP cert (which is for project managers and had nothing to do with his job)... it was all fruit salad for his wall and for his annual contract negotiation
>>
>>738051556
Yuup
>>
>>738051518
I wasn't fucking born in Russia or Romania where they start hacking before they even learn to code. I learned how to program, I didn't learn because i wanted to be a hacker
>>
>>738051498
If you passed the CEH, then Sec+ will be a breeze for you. You should attempt it ASAP.
>>
>>738051108
>>Personal devices

Aint no one going to pay you to secure their home computer.
>>
>>738051653
Then why would you answer at all if you don't want to help?
>>
>>738051424
Then you should know that answer
>>
>>738051779
Yeah, it's just problematic finding time
>>
>>738051834
>hes never heard of BYOD
>>
>>738051834
I think its funny you're the only one who caught that, i don't know the statistic for businesses but i know windows far out surpasses nix
>>
>>738051846
I know what it is but not how to actually use it
>>
File: whydontyoulikeclowns.jpg (44KB, 466x311px) Image search: [Google]
whydontyoulikeclowns.jpg
44KB, 466x311px
OP is a troll and a timewaster
>>
>>738051844
to teach you that HTML is NOT a programming language
>>
>>738051852
Some pearson Vue test centers are open on saturdays, if that helps. It depends on the center.
>>
>>738051951
ok sorry. Its still a language. I know its mark up
>>
>>738051977
I got my PTCB cert at a Pearson center. My test was on a Sunday afternoon
>>
>>738051951
But is CSS? :P
>>
altho OP is a faggot and worthless coder if he considers javascript/css a language lol. Anyhow, if you really want to hack you need to understand how security works in order to find ways to breach it. You could start small by deploying your own SQL server and trying to hack it or to perform a sql injection. If number 1 goes through you could remotely fire sql commands by remote shell. Basically thats an easy start.. also you are a retard and you will fail even at this.
>>
File: 1497292285309.gif (2MB, 320x240px) Image search: [Google]
1497292285309.gif
2MB, 320x240px
>>738048013

So you learned all that stuff without realising the exploits? Read your books again you dense cunt.

t.Network Admin that passed his ethical hacking class without studying due to learning most of it in other classes
>>
>>738051951
This
>>
This is a new one. Coder wants to learn how to hack?! OH my head is about to explode. Get a job coding, find exploits on your new job platform, report them find a fix. that would be a start to get into hacking. Although most hackers learn without programing experience.
>>
>>738052235
its a styler
>>
what are good certifications to get that will help in this area?
I already have a lot of knowledge about comp sec and all that crap
>>
>>738052313
>Although most hackers learn without programing experience.

You mean SkripKiddies learn without programming. We could all teach OP how to use Kali in the span of 2 hours. That doesnt mean he is a hacker. It means he knows how to run a half dozen programs and when.

Without deep programming and networking knowledge you are basically just pressing buttons in a program someone else wrote for you.
>>
>>738052544

Read the thread.
>>
>>738052544
also, OP if you know coding languages, have a look at bug bounties...
make $$$ while learning how to find flaws in other people programming/networking
>>
>>738052598
teach him to write metasploit modules in ruby
ez
>>
>>738052668
Ive been thinking about it and looking into it. Most companies look for some one with a degree in some kind of programming. Only smaller companies and web developers hire
>>
File: 1499137790771.png (223KB, 351x469px) Image search: [Google]
1499137790771.png
223KB, 351x469px
>>738052644
our samefag dubs
will do
>>
>>738052544

If you want to work in a large corporation, go Cisco. 90% of US companies over a few hundred employees have entire networks built on Cisco hardware. Cisco, VmWare, and Microsoft certs will get your farthest in the corporate world.

If you work for a VAR or MSP its best to be as broad as possible with your skills, in that case look for non-manufacturer specific certs
>>
Bullshit, most companies I've work that have talented coders aren't even college grad but drop out.
>>
>>738052853
No one is "hiring" you. Bounties are paid when discovered.
>>
Fuck cisco for for JUnos since you know programming.
>>
>>738048013
you arent a programmer if HTML is a programming language
>>
>>738048013
C/C++, C#, PHP, Python, Java/JavaScript, Objective-C and HTML/CSS.
>Java/JavaScript
>Implying you know anything about code at all while you can't tell java and javascript are in no way related
>>
>>738053055
thanks captain obvious
>>
File: instnigger.jpg (140KB, 1467x930px) Image search: [Google]
instnigger.jpg
140KB, 1467x930px
>>738048013

clearly you didn't yet download the Supa HaXx0r Fassst Downloader
>>
>>738052853
bug bounties can be done by anyone regardless of background.
hacker one dot com - google it
is a bug bounty programe. Also im sure it would look pretty good if you find some bugs and get paid for them to a potential employer
Thread posts: 95
Thread images: 9


[Boards: 3 / a / aco / adv / an / asp / b / bant / biz / c / can / cgl / ck / cm / co / cock / d / diy / e / fa / fap / fit / fitlit / g / gd / gif / h / hc / his / hm / hr / i / ic / int / jp / k / lgbt / lit / m / mlp / mlpol / mo / mtv / mu / n / news / o / out / outsoc / p / po / pol / qa / qst / r / r9k / s / s4s / sci / soc / sp / spa / t / tg / toy / trash / trv / tv / u / v / vg / vint / vip / vp / vr / w / wg / wsg / wsr / x / y] [Search | Top | Home]

I'm aware that Imgur.com will stop allowing adult images since 15th of May. I'm taking actions to backup as much data as possible.
Read more on this topic here - https://archived.moe/talk/thread/1694/


If you need a post removed click on it's [Report] button and follow the instruction.
DMCA Content Takedown via dmca.com
All images are hosted on imgur.com.
If you like this website please support us by donating with Bitcoins at 16mKtbZiwW52BLkibtCr8jUg2KVUMTxVQ5
All trademarks and copyrights on this page are owned by their respective parties.
Images uploaded are the responsibility of the Poster. Comments are owned by the Poster.
This is a 4chan archive - all of the content originated from that site.
This means that RandomArchive shows their content, archived.
If you need information for a Poster - contact them.