.

An Ethical Hacker must have these skills...

<<

bigtone82

Newbie
Newbie

Posts: 7

Joined: Tue Feb 26, 2008 5:32 pm

Post Wed Mar 05, 2008 12:24 pm

An Ethical Hacker must have these skills...

..Whats your opinion?

<-- Complete n00b to the ethical hacking community and I've been on a windows computer all my life.  I'm in IT and I want to be more learned on security and everything that is involved.

So far I know that you need 

-->

Basic/Advanced Linux Knowledge



Add to my list!
<<

Dengar13

User avatar

Sr. Member
Sr. Member

Posts: 380

Joined: Tue Sep 20, 2005 8:43 am

Location: The Steel City

Post Wed Mar 05, 2008 12:56 pm

Re: An Ethical Hacker must have these skills...

Why not start out reading a book on hacking, like Hacking for Dummies, Hacking Exposed, any Kevin Mitnick book?  This could give you an overview of the fundamentals of hacking, and the Mitnick books have good stories, and history on hacking.

There are too many elements to consider on where to start.

Welcome by the way.
A+, Net+, MCP, CEH
MCSE: Security/Messaging
MCSA: Security/Messaging
Former U.S. Marine and damn proud of it!
<<

bigtone82

Newbie
Newbie

Posts: 7

Joined: Tue Feb 26, 2008 5:32 pm

Post Wed Mar 05, 2008 1:11 pm

Re: An Ethical Hacker must have these skills...

Thanks,

I've read Mitnik's art of deception... Really cool what you can do with social engineering.

I'll check out the two other books you mentioned.
<<

eth3real

User avatar

Sr. Member
Sr. Member

Posts: 309

Joined: Wed Feb 27, 2008 10:35 am

Location: US

Post Wed Mar 05, 2008 1:16 pm

Re: An Ethical Hacker must have these skills...

Welcome to the forum! There are lots of nice people here.  ;D

I agree with Dengar13 about starting with a couple of books.

I also agree with you about basic Linux knowledge. But, I would not start right off with a hacking distribution, I would get to know the basics. Start with something like Ubuntu. Learn how to use the terminal, install programs, etc.

Since you are already in IT... If you don't already know, I would suggest learning about the TCP/IP protocol, and learn the differences between a hubbed network and a switched network.

There are a lot of aspects to learn about, but those are good to start with.
Last edited by eth3real on Wed Mar 05, 2008 1:18 pm, edited 1 time in total.
Put that in your pipe and grep it!
<<

bigtone82

Newbie
Newbie

Posts: 7

Joined: Tue Feb 26, 2008 5:32 pm

Post Wed Mar 05, 2008 1:21 pm

Re: An Ethical Hacker must have these skills...

I'm completing my MCSA at the moment for my position here and theN i'm going to go into CCNA training, get some switches/routers and set up a virtual network.  In the meantime, work with linux at home and get a handle on the OS and go from there I think.
<<

eth3real

User avatar

Sr. Member
Sr. Member

Posts: 309

Joined: Wed Feb 27, 2008 10:35 am

Location: US

Post Wed Mar 05, 2008 1:32 pm

Re: An Ethical Hacker must have these skills...

Always feel free to ask questions here.

A lot of the people here really know their stuff, and they are always helpful.
Put that in your pipe and grep it!
<<

pseud0

User avatar

Recruiters
Recruiters

Posts: 210

Joined: Sat Nov 17, 2007 8:26 pm

Location: Detroit, Michigan

Post Wed Mar 05, 2008 1:36 pm

Re: An Ethical Hacker must have these skills...

Necessary ethical hacker skills, the starter edition:
TCP/IP
OS basics for M$ and the *IX distro of your choice
Internal network basics (switches, hubs, firewalls)
A sense of humor (preferably dirty but manic is also acceptable)
External network basics (routing, IP, interaction with internal networks, etc)
Relationship between services, ports, and how exploits work
Washboard abs
Some familiarity with coding (not expert, but can muddle through)
Understanding of general web application construction (front/back end, etc)
A WOW account (maybe EverQuest if you roll like that)
Some level of business sense (need to explain business impact of your findings)
A comfort level with your skin tone being 3 shades more pasty than your racial peers
CISSP, CISM, CISA, GCIH, GREM, CEH, HMFIC, KTHXBIROFLCOPTER
<<

eth3real

User avatar

Sr. Member
Sr. Member

Posts: 309

Joined: Wed Feb 27, 2008 10:35 am

Location: US

Post Wed Mar 05, 2008 1:39 pm

Re: An Ethical Hacker must have these skills...

pseud0 wrote:Necessary ethical hacker skills, the starter edition:
TCP/IP
OS basics for M$ and the *IX distro of your choice
Internal network basics (switches, hubs, firewalls)
A sense of humor (preferably dirty but manic is also acceptable)
External network basics (routing, IP, interaction with internal networks, etc)
Relationship between services, ports, and how exploits work
Washboard abs
Some familiarity with coding (not expert, but can muddle through)
Understanding of general web application construction (front/back end, etc)
A WOW account (maybe EverQuest if you roll like that)
Some level of business sense (need to explain business impact of your findings)
A comfort level with your skin tone being 3 shades more pasty than your racial peers


Well put, pseud0.

I think that is an excellent start for a new ethical hacker. ;D
Put that in your pipe and grep it!
<<

bigtone82

Newbie
Newbie

Posts: 7

Joined: Tue Feb 26, 2008 5:32 pm

Post Wed Mar 05, 2008 1:45 pm

Re: An Ethical Hacker must have these skills...

lol, I've got a lot of that on the list.... Working on the distro basics and washboard abs atm....

The coding part is what scares me... I took a weed out java class in college and I think that scarred me for life regarding programming... I've been thinking of picking up C Primer Plus and working through that...


Oh if I only had 40 hour days it would be so much easier to go through everything I want to learn.
<<

eth3real

User avatar

Sr. Member
Sr. Member

Posts: 309

Joined: Wed Feb 27, 2008 10:35 am

Location: US

Post Wed Mar 05, 2008 1:53 pm

Re: An Ethical Hacker must have these skills...

As far as programming goes, you should really just learn scripting for now. Not even writing scripts, yet, but just be able to read a bash script, VBScript, etc. and have a general idea of what it does.

Later, it will become very useful to be able to write scripts, and programs, or at least be able to modify source code.
Put that in your pipe and grep it!
<<

LSOChris

Post Thu Mar 06, 2008 8:48 am

Re: An Ethical Hacker must have these skills...

pretty good replies

where the F were you guys when this was going on

http://www.ethicalhacker.net/component/ ... ic,1821.0/

as far as programming. if you are new, start incorporating it into your learning plan NOW, if you stick with this field and you cant code or script you will hit a point where you cant put your ideas into code (or not easily) and that just sux
<<

sgt_mjc

Sr. Member
Sr. Member

Posts: 294

Joined: Tue Feb 05, 2008 8:34 am

Location: AL

Post Thu Mar 06, 2008 9:35 am

Re: An Ethical Hacker must have these skills...

Chris,

It seems like the one guy on that post was more of a fan of tools than actual knowledge. Being new and having sat through various exams, I agree that you need knowledge of TCP/IP and how it works. Any one can run a tool and get a shell. Even I have done that. And I got a thrill from that. I also recognize that I still have a lot to learn. That being said, I also think that you need to understand the output a tool gives you. Thanks for posting that thread.
Mike Conway
CISSP
CompTia Security +
C|EH
<<

RoleReversal

User avatar

Hero Member
Hero Member

Posts: 928

Joined: Fri Jan 04, 2008 8:54 am

Location: UK

Post Thu Mar 06, 2008 9:45 am

Re: An Ethical Hacker must have these skills...

BigTone82,

first off welcome to the forum.

Only thing I'd add to the list is that before you get any of the things previously listed you need one thing, patience.

From my experience it take a lot of time and a lot more work to be an 'ethical hacker'. I've been around IT and security for a while and don't come close to what I'd class as a hacker (leaving the holy-wars out of it  ;) ) but I'm learning fast, have the ethical part and I'm still here wanting to improve.

As others have said learning the basics first helps (TCP/IP etc.) but don't expect to learn everything instantly. Most importantly though if you want to remain interested in the field for the long game, ignore all the advice here and study whatever makes you go 'ooooh, hows that work?' be it IDS, shellcode, scanning, etc. I found this has helped keep up motivation to learn through the 'do I really need this?' moments.

If you dive in wherever you're most motivated you'll find the basics come through time as and when you need them. (at least I'm finding that).

Good luck, and don't be afraid to ask the questions when necessary (just ask google first  ;D )
<<

bigtone82

Newbie
Newbie

Posts: 7

Joined: Tue Feb 26, 2008 5:32 pm

Post Thu Mar 06, 2008 3:06 pm

Re: An Ethical Hacker must have these skills...

Thanks guys,

Yes I'm a smart guy so the n00b questions shouldn't slip out into here.  I'm so tired of reading cert forums and seeing "OMG CAN I UZE A+ FOR A MCSA ELECTIVE"



Thanks for all your help.  I'm going through the Redhat Linux CBT's right now.  The power of the shell compels me :)

Plus I see videos later on with nmap and snort and thats something I really want to get into so I'm excited.
<<

shawal

Jr. Member
Jr. Member

Posts: 88

Joined: Mon Mar 10, 2008 1:24 pm

Post Mon Mar 10, 2008 3:48 pm

Re: An Ethical Hacker must have these skills...

The Penetration field is quite deep and wide, you can specialize in Windows pentesting, or databases, or web application security, what ever floats your boat. if you are very comfertable with Windows and know how to secure it well and have read the hacking exposed books or similar and would like to know more about Linux I would reccomend that you check the Linux documentaion project, and howtos, try to setup a server and secure it, and pen test it, scripting in Linux/Unix world is a must to understand the start/stop scripts, and to automate most of your work, In brief use what you already got, and develop yourself in the areas you enjoy most
RHCE, GIAC GCIH.
Next

Return to Network Pen Testing

Who is online

Users browsing this forum: No registered users and 1 guest

cron
.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software