Login Register




The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.


Where to start filter_list
Author
Message
Where to start #1
Hi,
I'm interested in website hacking and I would like to know where to start to learn it.
I know C Language and a bit of c# and PHP, even if I don't know if they are useful to it.
I don't want simply click some buttons and "All Done"....I want to understand how things work.
I hope for an help


RE: Where to start #2
I suggest you start looking into sql injection and cross-site scripting. These are the most common vulnerabilities even though sql injections are getting less common these days, there's still a lot of vulnerable sites out there

You should read these tutorials
My SQL injection complete tutorial by @V1P3R
Basic xss tutorial by @Anima Templi

To get some real hands on practice you should check out the "Targets for training" and "Self-Hosted Vulnerable Web Applications" sections here

You should also learn; HTML and JavaScript. This will give you a basic foundation to continue to build on
"SQL Injection-a-holic"

Twitter | Security Sucks | My Blog


RE: Where to start #3
Thank you so much, I start reading them


RE: Where to start #4
Question answered by @shp0ngl3

Marked as solved and closed accordingly
If you need help feel free to PM me
[Image: klfpJD]
Probitcoin
Freebitcoin
BTC clicks
bitcoin wallet:
1FBPAanbs3rJU9BUpobpDJc9hHUaCaC25N


RE: Where to start #5
(06-07-2013, 11:55 PM)TheB0th Wrote: Thank you so much, I start reading them

Most of it have already been answered, but I would like to add the importance of knowing the different programming languages. Especially PHP is important, since most XSS vulnerabilities and such are found in bad coding. Javascript, will also be a deal breaker because you will also have to know this to be succesful with XSS. For SQL injections you should look into the SQL query language. I think you can guess by the names why it's important? You should not focus that much on HTML it's been ages since I have seen actually vulnerabilities in HTML and minimal knowledge about it more than enough to study web exploitation.

- Oh and for the PHP learn that in-depth since it's the most important language to know if you want to be succesful with this, when you have learned PHP study secure programming in it. This will help you identify the vulnerabilities by looking at the source and frankly it's where you will find most of your vulnerabilities.