[Eclipse]

Hey guys,

The world of website exploitation has fascinated me for a long time. How a hacker can exploit a small thing and deface or steal data from a site/server.

I'm looking to get into this field so I want some advice on what I should learn. For example; languages, terms, systems etc.

Thank you for any help in advance.

-Sparky

[Adorapuff]

My advice, learn PHP and MySQL if you want to get into web exploitation, or C++ and some basic assembly if you want to learn appsploitation and reverse engineering. Don't straight up learn SQLi without knowing what it does.

[w00t]

As with any form of exploitation, the key is to understand how the program works. In most cases, that means knowing the language it was programmed in better than the developer of the program.

[Cressi]

My advice, learn PHP and MySQL

This is how I started out; and probably the best way I can figure to start out.

[Zayne]

You should learn the programming languages to understand how it works behind the scene. Trust me, you'll get the glam of it a lot better and you will be able to read 0days & other material a lot easier.

[misnar]

You should learn the programming languages to understand how it works behind the scene. Trust me, you'll get the glam of it a lot better and you will be able to read 0days & other material a lot easier.

>read 0days

is this a joke?

[Zayne]

>read 0days

is this a joke?

I more meant exploits, e.x. from exploit.db or such. To understand how they work before performing them.

[ParaZite]

Your best start is to understand the language of PHP and SQL. You should also research to understand how MySQL works along with exactly how SQL injection works. I would also recommend getting a little background knowledge on cryptography as we all know MySQL has standard MD5 password encryption but can be edited at any time by the website owner.

So learn PHP, SQL, know how SQL injection works, and get a little research in on cryptography and algorithms.