[D@rk1433]

Hello masters . I want to learn web pentesting. My other friend guide me to learn web languages and i learned basics. So now tell me how i start to learn web pentesting.
Just give me guidance to start.Just show me path. After that i will walk myself in that path.
Give me resources,books recommendation to read very first with serial like first read this book then this and this.
Give me suggestion like that. Also i heard that OWASP is great resources in this but i am confused in this.How i can learn from OWASP? How i can start with webgoat if i have null in this field.All suggestions are welcome.
Thanks in advance

[phyrrus9]

<begin troll>

Go ahead and check out Kali linux, it is the hacker's best friend.

Also, it isn't web pentesting, its called being an uber 1337 hax0r...get it right. And to be one of those, you are gonna wanna learn how to use Kali really well, get Low Orbit Ion Cannon installed, Download MSN Messenger, and run around the internet threatening to DDoS people.

<end troll>

No really though, just because you know HTML doesn't mean you can do any sort of penetration testing (hacking). You are going to want to read up on TCP, UDP, packet filters, buffer overflows, DOS (denial of service), race conditions, and get really used to using Etherial. It isn't a fun route, and it won't be something you learn overnight (or even in the course of a year, no matter how dedicated you are). Nobody on this forum is an expert in those fields but few of us know enough to get by.

First off, you sound like a skid...and I hate skids.

Ditch the attitude or expectation that people are going to do all the work for you and just give you a program that does exactly (or even remotely) what you want. You will need to do all of the hard work yourself. I suggest you sit down, get a broad understanding of the topics I listed above, then start iteratively going through the list until your understanding is more on the 25th percentile level...

And, I don't know if English is your native language or not (if it is, you're too young to be on this forum) but try and study up on it, it's atrocious.

[D@rk1433]

Thanks for your suggestion.I will note those lists and google it to learn.But on internet there are many ebooks to learn but problem is that i don't know from where i start which ebook first i read.
And yes any expert once was skid.And i am dedicating to learn and want to increase my knowledge in web hacking.

[phyrrus9]

And yes any expert once was skid.And i am dedicating to learn and want to increase my knowledge in web hacking.

Actually, you are quite wrong there...The difference between skid and newcommer is attitude. Skids expect the world to do the work for them, new people just simply dont know how to do it (but that doesn't stop them from trying until they get it)..

I am 100% self taught. Never used an "ebook" in my life. Actually, never even opened any of my college textbooks, and half of the professors still use projects from my github as homework assignments for students.

Just take a task and do it. If you don't know how to do something, debug your thoughts and google.

[Crypt]

And yes any expert once was skid.

I don't think skid means what you think it means.

https://www.owasp.org and https://nets.ec

If you haven't learned PHP along with an interpreted language like Perl or Python, don't even try to learn how to hack and go learn those things right now.

Last thing - people who say "I don't learn to hack, I hack to learn" are fucking retards. This is how you get caught and get in trouble with it.

[Brawler]

Here would be a good start:

https://www.owasp.org/index.php/OWASP_Br...ns_Project

It contains a significant number of applications that are vulnerable to specific things. Most of which will have additional documentation on how to exploit some of the most common/"low hanging" fruits.

However, with that said.... I wouldn't expect that anyone will help you with such a broad question.. But if you came in with a specific question in relation to a specific problem... More people would be willing to help.

Put in the effort and people will notice.

[phyrrus9]

Last thing - people who say "I don't learn to hack, I hack to learn" are fucking retards. This is how you get caught and get in trouble with it.

Actually, I am going to correct you there, because I do hack to learn.

It all depends on if you know the difference between a hacker and a cracker.

hack
comparison

the story of Mel

"hacking to learn" is usually used by skids, but remember that skids don't know anything.

[Crypt]

Actually, I am going to correct you there, because I do hack to learn.

It all depends on if you know the difference between a hacker and a cracker.

hack
comparison

the story of Mel

"hacking to learn" is usually used by skids, but remember that skids don't know anything.

"Hacker" has many different definitions depending on who you ask, I honestly don't care what terminology I use as long as people understand what I'm saying.

Go hack http://fbi.gov to learn and see how that works out. I'm not saying you're stupid enough to do this, I'm implying there are skids who say "hack to learn" that are stupid enough to do this and they encourage other people to do it.

[phyrrus9]

"Hacker" has many different definitions depending on who you ask, I honestly don't care what terminology I use as long as people understand what I'm saying.

Go hack http://fbi.gov to learn and see how that works out. I'm not saying you're stupid enough to do this, I'm implying there are skids who say "hack to learn" that are stupid enough to do this and they encourage other people to do it.

That is the skid version of hack. Those of us on this forum are respectable hackers, not skids.