Home
Calendar
Certifications
Columns
Features
Forum
Resources
Vitals
Latest Additions
April 2013 Free Giveaway Sponsor - eLearnSecurity
Human Intelligence to Navigate the Security Data Deluge
February 2013 Free Giveaway Winner of SANS CyberCon Training
Interview: Bugcrowd Founders on Herding Ninjas for Crowdsourced Bug Bounties
Network Forensics: The Tree in the Forest
March 2013 Free Giveaway Sponsor - Mile2
Book Review: Violent Python
February 2013 Free Giveaway Sponsor - SANS
Holiday 2012 Free Giveaway Winner of Metasploit Pro by Rapid7
Course Review: SANS FOR408 Computer Forensic Investigations – Windows In-Depth
The Security Consulting Sugar High
Tutorial: Fun with SMB on the Command Line
Interview: Ilia Kolochenko, CEO of High-Tech Bridge
October 2012 Free Giveaway Winner of LearningGate Training
The Broken: Assessing Corporate Security in 2012 to Make a Better 2013
EH-Net Login
Welcome Guest.
Username:
Password:
Remember me
Lost Password?
No account yet?
Register
Who's Online
We have 31 guests online
Free Business and Tech Magazines and eBooks
You are here:
Home
Ethical Hacking Discussions and Related Certifications
Network Pen Testing
help
EH-Net
May 23, 2013, 04:24:52 AM
Welcome,
Guest
. Please
login
or
register
.
Did you miss your
activation email?
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
News
: Go back to The Ethical Hacker Network Online Magazine
Home Page
Home
Help
Calendar
Login
Register
EH-Net
>
Ethical Hacking Discussions and Related Certifications
>
Network Pen Testing
(Moderator:
don
) >
help
Pages: [
1
]
2
Go Down
« previous
next »
Print
Author
Topic: help (Read 12063 times)
0 Members and 1 Guest are viewing this topic.
H1PPY
Newbie
Offline
Posts: 3
help
«
on:
March 14, 2008, 12:25:04 AM »
ok so i want to learn like the basics of programing and hacking and then move on from there but i don't know where to start.
Logged
shawal
Jr. Member
Offline
Posts: 88
Re: help
«
Reply #1 on:
March 14, 2008, 01:52:30 AM »
H,
Welcome onboard. Start with the things you enjoy most, if you like to delve deep into the system, system and network programming in C could be good. if you do not know a programming language try learning Java and Java script, Web programming is another area that is quite hot at the moment. one good book i have seen that cover the start areas of security very well is
"Hacking, the art of exploitation"
I have not checked the 2nd edition, i might as well do. what current system, network, programming, mathematical skills do you have?
Logged
RHCE, GIAC GCIH.
Andrew Waite
Hero Member
Offline
Posts: 928
Re: help
«
Reply #2 on:
March 14, 2008, 03:24:42 AM »
H1PPY,
I'll start with the programming aspect of your questions as thats where I got started. I'd recommend that you try to find a small project that you want to complete, I've found that nothing can be harder than trying to learn programming for the sake of programming. If you've got a project it will give you something to work towards, keep you focused and ultimately give you a sense of achievement as you complete various aspects of the project. From experience though, when starting out don't be afraid to through a project away if you realise you should have done it differently. Start again and use what you've learnt to build a better solution and learn more along the way (assuming you haven't got a boss looking over your shoulder.)
Whilst I'd agree with shawal that C (and derivatives) is a good language for systems and network programming, it can be a scary place to start. I've known several programmers and lecturers who advocate the use of web based coding for learning as it is easy to get interaction with the program without a lot of 'black magic'. Personally I think that the intergration between presentation and application logic can be confusing and the lack of structure can allow you to form bad programming habits.
For a starting point I'd recommend trying Visual Basic, although you'll probably want to graduate to a more 'advanced' language after you known the basics, VB can be a great starting point to learn to code and common programming structures. After all, BASIC was originally designed as an educational tool.
As you can probably guess from my response, there is no 'right' language for any programmer, or any situation. From reading your post I'm assuming that you are just starting out, if possible enrol an an introductory programming course. The guidance and assistance from an experienced programmer can make a large difference in your rate of learning and overall proficiency, possible making the difference between you being a 'code hacker' or a programmer.
If you know other programmers, try using the same language and toolsets as them, hopefully they should be able to offer assistance and recommendations whilst you are setting out. It can also be a nice sense of achievement and indication as to your progress when mentors who taught you the ropes starting asking for assitance and thoughts from you for their projects.
For the hacking aspect of your question, I'll mostly leave that to more experience members of this forum. Most of the recent books published should give you a good start, for a complete new entrant into the field Hacking for Dummies and Hacking Exposed seem to be the most accessable and are often recommended. Don't forget about Google aswell, should be every hackers best friend
Good luck
Logged
--
http://www.infosanity.co.uk
--
http://blog.infosanity.co.uk
shawal
Jr. Member
Offline
Posts: 88
Re: help
«
Reply #3 on:
March 14, 2008, 05:36:56 AM »
H1PPY,
I do not totally agree with the visual basic as an introduction to programming even though my introduction was BASIC. BASIC is a mess, does not strict you to learn proper data, and programming structures.BASIC is good for prototyping and getting things done quickly, however depending on Interest and platform that will be used I would change that for either Ruby/python scripting languages, they are simple multiplatform (including the web programming if you want to consider ROR), I would add perl too as there are lots of scripts that are already written in perl, however i hate it
some URLs to get you started on Security Basics can be found in here:
https://www.sans.org/reading_room/whitepapers/testing/
https://www.sans.org/reading_room/whitepapers/basics/
and of course David Wheeler document in secure programming
http://www.dwheeler.com/secure-programs/
, probaly it is not what you asked for, however take a look at it, and bookmark it for future reference
browse the older forum subjects, and most likely you will several interesting answers with different point of views to your question
W.
Logged
RHCE, GIAC GCIH.
H1PPY
Newbie
Offline
Posts: 3
Re: help
«
Reply #4 on:
March 14, 2008, 07:18:59 PM »
Quote from: shawal on March 14, 2008, 01:52:30 AM
what current system, network, programming, mathematical skills do you have?
none at all...programming i only no sum php and wut u mean by mathematical skill
Logged
shawal
Jr. Member
Offline
Posts: 88
Re: help
«
Reply #5 on:
March 28, 2008, 02:53:05 AM »
php is a good start if you want to pursue programming, however make sure you read articles about php security, or even better get a php security book.
Math skills as in interest in decoding/encoding encryption, statistical analysis type of skills or interest in researching these kinds of topics
Logged
RHCE, GIAC GCIH.
nebu10uz
Sr. Member
Offline
Posts: 368
Re: help
«
Reply #6 on:
March 28, 2008, 11:16:11 PM »
Quote
and of course David Wheeler document in secure programming
http://www.dwheeler.com/secure-programs/
Hey, thanks for the link! Looks like a good read.
Logged
Security+, OSCP, CEH
Kraxor
Newbie
Offline
Posts: 4
Re: help
«
Reply #7 on:
April 07, 2008, 05:13:07 AM »
Hello i think you first start with basic things like TCP/IP-"what's this" and all basic articles from google for network. Then start learning C++ ..
Am... C++ is more flexabile than C... You can start Learning C++ without to know C.
Sry for my english it's not so good... i think you understand me ...
Logged
shawal
Jr. Member
Offline
Posts: 88
Re: help
«
Reply #8 on:
April 07, 2008, 10:57:50 AM »
Kraxor,
Java would be suited better if are thinking Object Oriented Programming. C++ is more flexiable and complex than C, it is more extensive. C is simple, the only complications peopel have with C is pointers, however for system programming, and for security purposes it is much stronger to program in C. saying so could be also misleading as i see metasploit among other applications are written in Ruby, some others are written in python. so i again emphasize to learn programming you can start from any where, whoever this will affect the way you model and design your prorgams, if you start with python or ruby, this would be a very nice neat choice as you will think in objects, and in python you will produce a very readable code, while in ruby your code will be short and will make sense
Logged
RHCE, GIAC GCIH.
vijay2
Full Member
Offline
Posts: 220
Re: help
«
Reply #9 on:
April 07, 2008, 11:11:31 AM »
I would say learning a programming language is not a absolute requirement for ethical hacking though it would help after who have had got down the advanced TCP/IP skills and all the networking concepts. I would say, you should be proficient in advance TCP/IP and networking concepts and protocols first before you learn coding for ethical hacking.
Thats just my 2 cents.
Logged
GPEN GCFA GCIH CISSP CISA GSEC OSCP C|EH Security+
shawal
Jr. Member
Offline
Posts: 88
Re: help
«
Reply #10 on:
April 07, 2008, 11:32:26 AM »
vijay2,
I do have a different opinion in here, scripting as an automation tool, and understanding exploits, and controling security tools from workflows, or control programs will differentiate an ethical hacker from a script kiddie big time. I do agree with you that network, and system administration are a must have skill, and i do see trend in system admins these days not to script things, and get away with it. however to understand what is going on a Linux/Unix system shell scripting is a must have skill.
my 0.02
Logged
RHCE, GIAC GCIH.
vijay2
Full Member
Offline
Posts: 220
Re: help
«
Reply #11 on:
April 07, 2008, 11:52:58 AM »
I think you are just taking this all wrong, programming language (ruby, python, C etc ) and system programming (shell scripting, windows command batch files, wmic) are 2 different things, for ethical hacking its better to be proficient in the automation with native commands is much more important than know how to code in other language and compile them. You rarely have that option. Publicly available exploits always needs to be modified and complied on the target system most of the time and you are making a assumption that you will have the required compiler is available there.
All I will say is never there never a good or bad OS, its just a personal choice and a opportunity.
Logged
GPEN GCFA GCIH CISSP CISA GSEC OSCP C|EH Security+
Kraxor
Newbie
Offline
Posts: 4
Re: help
«
Reply #12 on:
April 07, 2008, 11:58:29 AM »
Good system administrators make own patches
........... First exploit then fix ...
To exploit you must "read" the source code.... i speak for OPEN Source right now ...
if you think Administrator do ./configure ./install ./blabla ./run
hope you will not Administrate my network
All is linked... . This is the true, you cant start from - ][Half --->Top
you start from - ][nothing ---> Half -----> Top this is very long process...
To become good you need time ...
Time is money ....
You cant rollback the time ...
so TIME > ALL
Shawal you are right but as i say this is my thinking ... Ruby and python are good too but C++ is the best.... you can do things like Ruby and Python but rly it's more hard.... but you can do all and ++++++ extras... that you cant do in Ruby and Python. But all is require sense and "what you want to do like a Programmer" Im beginer in Programming so i can say BIG WORDS.... but this is my opinion.
Logged
g00d_4sh
Sr. Member
Offline
Posts: 394
Re: help
«
Reply #13 on:
April 08, 2008, 08:19:14 PM »
Not overly related to the original post, but something I found rather entertaining related to C++
http://its-different.blogspot.com/2008/02/itsdifferent-stroustrups-interview.html
I remember reading this a long while ago, on a different spot, and I actually saved the original. I dont' remember where I found it, this is a copy though. Anyway, it's an interesting read for you code monkeys.
Logged
"Bad.. Good? I'm the guy with the gun"
shawal
Jr. Member
Offline
Posts: 88
Re: help
«
Reply #14 on:
April 09, 2008, 12:04:40 AM »
vijay2,
so you would like to use an exploit without being able to dissect it? most Linux boxes will have python/perl by default, most webserver will have php/asp by default. in windows you will have the cmd.exe , wmic, among other new shells, and sometimes you will be lucky and get a cygwin
the development environment does not have to be complex, scripting is about simplicity.
I never made the assumotion that you will need the compiler on the victim machine, however if it is there he/she is only to be blamed to make your job easier, same applies if he/she provides a tftp client, or vnc. even worst netcat or some sort of netcat functionality
any security topic is not limited to one thing and no one person can master all skills. so ethical hacking is a wide domain where several skills can be usefull, the more you have them in your utility belt or hacktool box, the more resourceful you are, however this is only valid if the skills of how to use them goes along with the tools availability including coding
have a nice day
Logged
RHCE, GIAC GCIH.
Pages: [
1
]
2
Go Up
Print
« previous
next »
Jump to:
Please select a destination:
-----------------------------
EH-Net
-----------------------------
=> Calendar Of Events
===> ChicagoCon 2007
===> ChicagoCon 2008s
===> ChicagoCon 2008f
===> ChicagoCon 2009s
=> Ethical Hacktivism
=> News Items and General Discussion About EH-Net
===> Greetings
=> Special Events
-----------------------------
Ethical Hacking Discussions and Related Certifications
-----------------------------
=> General Certification
===> Networking
===> OS
===> Security
=> Compliance, Regulations & Standards
=> Control Systems
=> Cyber Warfare
=> Forensics
===> CCE / MCCE - (Master) Certified Computer Examiner
===> CHFI - Computer Hacking Forensic Investigator
===> EnCE - EnCase® Certified Examiner
===> GCFA - GIAC Certified Forensics Analyst
=> Hardware
=> Incident Response
===> CSIH - Computer Security Incident Handler
===> GCIH - GIAC Certified Incident Handler
=> Malware
===> Advisories
=> Mobile
=> Network Pen Testing
===> CEH - Certified Ethical Hacker
===> CPTC - Certified Penetration Testing Consultant
===> CPTE - Certified Penetration Testing Engineer
===> CSTA - Certified Security Testing Associate
===> eCPPT - eLearnSecurity Certified Professional Penetration Tester
===> ECSA - EC-Council Certified Security Analyst
===> GPEN - GIAC Certified Penetration Tester
===> OSCP - Offensive Security Certified Professional
=> Physical Security
=> Programming
=> Social Engineering
=> Web Applications
=> Wireless
===> CWNP Certs
===> GAWN - GIAC Assessing Wireless Networks
===> OSWP - Offensive Security Wireless Professional
=> Other
-----------------------------
Columns
-----------------------------
=> Editor-In-Chief
=> Andress
=> Gates
=> Haddix
=> Hadnagy
=> Heffner
=> Hoffman
=> Linn
=> RichM
=> Murray
=> J. Peltier
=> Weidman
=> Wilson
-----------------------------
Features
-----------------------------
=> /root
=> Book Reviews
=> Opinions
=> Skillz
===> Examples
===> May 06 - Star Hacks, Episode V: The Empire Hacks Back
===> July 06 - Hack Bill!
===> Sept 06 - Netcat in the Hat
===> Nov 06 - Hitch-Hackers Guide to the Galaxy
===> Dec 06 - A Christmas (Hacking) Story
===> Feb 07 - Charlottes Web Site
===> April 07 - Microsoft Office Space
===> June 07 - Serenity Hack
===> Oct 07 - Worst. Ethical. Hacker. Challenge. Ever.
===> Dec 07 - Frosty the Snow Crash
===> March 2008 - It Happened One Friday
===> Oct 2008 - Scooby Doo and the Crypto Caper
===> Dec 08 - Santa Claus Is Hacking to Town
===> Feb 2009 - Brady Bunch Boondoggle
===> July 2009 - Prison Break
===> October 2009 - SSHliders
===> December 2009 - Miracle on Thirty-Hack Street
===> December 2010 - The Nightmare Before Charlie Browns Christmas
-----------------------------
Resources
-----------------------------
=> Career Central
===> Looking For Work
===> Looking To Hire
=> Links to cool sites.
=> Mass Media
=> News from the Outside World
=> Tools
=> Tutorials
===> Tutorial Requests
Loading...
Exclusive Deal
SANSFIRE 2013
June 15 - 22
5% Off
w/ Code
:
EHN_5
SANS Deals 4 EH-Netters
5% OFF
Any
SANS Course
in Any Format!
Coupon Code:
EHN_5
Including
SANS Rocky Mountain 2013
&
SANS Boston 2013
Polls
Compared to this year, 2013 will be:
Great!
Better.
About the same.
Little worse.
FUBAR!
Recent Forum Topics
Editor-In-Chief
: Special Xmas Deal: 10% Off eLearnSecurity Courses
(3) by
hekvvddtest
Greetings
: Hello
(6) by
hekvvddtest
Greetings
: Obtain The Scoop On mulberry bags Before You Are Too Late
(13) by
hekvvddtest
Calendar Of Events
: HITBSecConf2013 – Amsterdam
(9) by
hekvvddtest
Special Events
: [Article]-Webcast: Deep Dive into Red Teaming with the Metasploit Framework
(19) by
hekvvddtest
Network Pen Testing
: HackaServer - Anyone tried it?
(4) by
hekvvddtest
Greetings
: Good day ...
(7) by
hekvvddtest
Gates
: Chris Gates' Blog RSA Finalist
(5) by
hekvvddtest
Network Pen Testing
: Ruby on Rails Vulnerabilities / Attacks in BackTrack 5 r3
(1) by
hekvvddtest
General Certification
: nth topic on Career Advice
(9) by
hekvvddtest
General Certification
: Direction
(5) by
hekvvddtest
Hardware
: Discreet Hacking Devices
(8) by
hekvvddtest
Calendar Of Events
: CanSecWest 2013
(5) by
hekvvddtest
Forensics
: Burn Note
(5) by
hekvvddtest
Calendar Of Events
: Cyber Readiness Challenge - Rome
(1) by
hekvvddtest
GCIH - GIAC Certified Incident Handler
: GCIH Free Practice test attempt
(0) by
prats84
GCIH - GIAC Certified Incident Handler
: Passed my GCIH
(0) by
prats84
News Items and General Discussion About EH-Net
: Change is Coming to EH-Net!!
(27) by
don
Greetings
: Hi from the UK
(2) by
n37sh@rk
Network Pen Testing
: AIX Vulnerability Assessments
(2) by
ras76
Tutorials
: Need guidance
(9) by
hanyhasan
Programming
: Finished Python Course in Codecademy now what?
(15) by
hanyhasan
Network Pen Testing
: De-ICE 1.140 released!
(2) by
superkojiman
General Certification
: CPT Practical Submission
(1) by
UNIX
OSCP - Offensive Security Certified Professional
: Failed my first attempt at the OSCP exam
(94) by
azmatt
Tools
: Social-Engineer Toolkit (SET) Version 5.0 “The Wild West” Released
(2) by
m0wgli
Malware
: EICAR?
(3) by
UKSecurityGuy
Advisories
: HTB23154: Multiple Vulnerabilities in Exponent CMS
(0) by
AndyP
Advisories
: HTB23153: Multiple Vulnerabilities in Jojo CMS
(0) by
AndyP
Advisories
: HTB23151: Cross-Site Request Forgery (CSRF) in UMI.CMS
(0) by
AndyP
OSCP - Offensive Security Certified Professional
: Class Scheduled 6/8 - Linux n00b
(7) by
Taemyks
OSCP - Offensive Security Certified Professional
: OSCP exam scheduled
(6) by
gbhat
Incident Response
: LinkedIn Forensics
(0) by
AFENTIS_Forensics
General Certification
: Red Team/Blue Team
(1) by
ajohnson
Career Central
: Starter cert?
(3) by
Grendel
Network Pen Testing
: Beginner Ethical Hacker
(1) by
m0wgli
EH-Net News Feeds
Latest Additions
Privacy Notice
for TDCC & All Properties
© 2013 The Ethical Hacker Network
Joomla!
is Free Software released under the GNU/GPL License.