+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.li/Forum-Tutorials)
+--- Thread: Sites to learn and PRACTICE Hacking... (/Thread-Sites-to-learn-and-PRACTICE-Hacking)
RE: Sites to learn and PRACTICE Hacking... - Eleven - 04-14-2014
Awesome!
I haven't tried the last one but I think I will give it a go!
RE: Sites to learn and PRACTICE Hacking... - snelsnelgemaakt - 04-16-2014
Nice share
RE: Sites to learn and PRACTICE Hacking... - snelsnelgemaakt - 04-16-2014
Nice share
RE: Sites to learn and PRACTICE Hacking... - pr0st - 04-21-2014
This is a great site to learn XSS / SQLi
http://www.enigmagroup.org/
RE: Sites to learn and PRACTICE Hacking... - pr0st - 04-21-2014
This is a great site to learn XSS / SQLi
http://www.enigmagroup.org/
RE: Sites to learn and PRACTICE Hacking... - dropzon3 - 04-24-2014
To toss a few more websites out(and some comments on those mentioned)
Restrictive Sandbox Challenge sites:
enigmagroup.org, hackthissite.org, hellboundhackers.org, hackthis.co.uk, bright-shadows.net
These sites while being 'alright' for an introduction to some concepts are not imo a good place to learn. The reason being that they don't actually have you exploiting anything. They try to keep things somewhat realistically but ultimately to pass their challenges your exploit needs to match pretty closely to what they expect. So though your solution might work in the real world for the problem because a character is different in your solution it fails. These sites are somewhat too restrictive. Its not that they are bad, they do get you thinking about stuff correctly.
Instead I'd look at virtual machines:
Damn Vulnerable Web App (DVWA) at www.dvwa.co.uk/ is a virtual machine you can run locally and run real exploits against. This means what you do is what you'd do in the real world.
Hack Me at https://hack.me/ is another good place to practice and learn. Instead of downloading and running VMs locally on hack.me you are able to spin up your own vulnerable virtual machines(made by other users) to attack. Again attacking in these VMs means you are attacking real exploits not just trying to figure out the expected solution.
Moving away from web exploitation:
Exploit-Exercises at exploit-exercises.com which contains VMs you run locally(like DVWA) and exploit. Starting with Nebula then Protostar followed by Fusion is a good introduction from basic non-technical binary exploitation to more modern exploits involving various modern protections such as ASLR, DEP, Canaries and the like. In my opinion Exploit Exercises is better than the next two for learning purposes.
Two more non-webapp focused sites are SmashTheStack (smashthestack.org) and OverTheWire (overthewire.org) both are run as wargames/challenge sites and don't require you to install them locally making them ideal for those who can't run VMs.
RE: Sites to learn and PRACTICE Hacking... - dropzon3 - 04-24-2014
To toss a few more websites out(and some comments on those mentioned)
Restrictive Sandbox Challenge sites:
enigmagroup.org, hackthissite.org, hellboundhackers.org, hackthis.co.uk, bright-shadows.net
These sites while being 'alright' for an introduction to some concepts are not imo a good place to learn. The reason being that they don't actually have you exploiting anything. They try to keep things somewhat realistically but ultimately to pass their challenges your exploit needs to match pretty closely to what they expect. So though your solution might work in the real world for the problem because a character is different in your solution it fails. These sites are somewhat too restrictive. Its not that they are bad, they do get you thinking about stuff correctly.
Instead I'd look at virtual machines:
Damn Vulnerable Web App (DVWA) at www.dvwa.co.uk/ is a virtual machine you can run locally and run real exploits against. This means what you do is what you'd do in the real world.
Hack Me at https://hack.me/ is another good place to practice and learn. Instead of downloading and running VMs locally on hack.me you are able to spin up your own vulnerable virtual machines(made by other users) to attack. Again attacking in these VMs means you are attacking real exploits not just trying to figure out the expected solution.
Moving away from web exploitation:
Exploit-Exercises at exploit-exercises.com which contains VMs you run locally(like DVWA) and exploit. Starting with Nebula then Protostar followed by Fusion is a good introduction from basic non-technical binary exploitation to more modern exploits involving various modern protections such as ASLR, DEP, Canaries and the like. In my opinion Exploit Exercises is better than the next two for learning purposes.
Two more non-webapp focused sites are SmashTheStack (smashthestack.org) and OverTheWire (overthewire.org) both are run as wargames/challenge sites and don't require you to install them locally making them ideal for those who can't run VMs.
RE: Sites to learn and PRACTICE Hacking... - zomgwtfbbq - 04-24-2014
I also have a hack challenge website, but takes a different approach to all the other hack challenge sites out there.
http://hackchallenge.net
I'm also currently writing an adult rpg with hacking elements in it.
(04-22-2014, 01:40 PM)oikonomeasxd Wrote: where can i find how to hack sites like these? i am a newbie and i can't even hack these.However i am willing to learnLearn how to program, how things work, read, read and read more. You will also find lots of exploit techniques on this site. Oh and read as if your life depends on it. :Thumbs-Up:
RE: Sites to learn and PRACTICE Hacking... - zomgwtfbbq - 04-24-2014
I also have a hack challenge website, but takes a different approach to all the other hack challenge sites out there.
http://hackchallenge.net
I'm also currently writing an adult rpg with hacking elements in it.
(04-22-2014, 01:40 PM)oikonomeasxd Wrote: where can i find how to hack sites like these? i am a newbie and i can't even hack these.However i am willing to learnLearn how to program, how things work, read, read and read more. You will also find lots of exploit techniques on this site. Oh and read as if your life depends on it. :Thumbs-Up:
RE: Sites to learn and PRACTICE Hacking... - Idyll - 04-25-2014
another one... www.thisislegal.com