Sinisterly
How to learn to hack a website? - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.li/Forum-Tutorials)
+---- Forum: Requests (https://sinister.li/Forum-Requests--826)
+---- Thread: How to learn to hack a website? (/Thread-How-to-learn-to-hack-a-website)

How to learn to hack a website? - Pot_bastard - 09-12-2019

Hello, sinisterly. I'm looking to learn on how to hack a website. Can anyone put me in the right direction to do so?

Thank you so much.

RE: How to learn to hack a website? - Refusal - 09-12-2019

I’d recommend looking into the many different techniques then finding one you feel comfortable learning like SQL Injection, XSS, etc etc

RE: How to learn to hack a website? - mothered - 09-12-2019

(09-12-2019, 01:52 PM)Refusal Wrote: like SQL Injection

Code Injection Is a very common attack vector.

In-Band SQLi, namely Union-Based & Error-Based are widely used In vulnerable applications to gain back-end access to the database. Content-Based/Boolean-Based & Out-Of-Band SQLi (not so common) are also very effective where applicable. Of course, In order to manipulate the database, sound knowledge of SQL Is paramount.

RE: How to learn to hack a website? - Pot_bastard - 09-12-2019

(09-12-2019, 01:52 PM)Refusal Wrote: I’d recommend looking into the many different techniques then finding one you feel comfortable learning like SQL Injection, XSS, etc etc

(09-12-2019, 03:31 PM)mothered Wrote:
(09-12-2019, 01:52 PM)Refusal Wrote: like SQL Injection

Code Injection Is a very common attack vector.

In-Band SQLi, namely Union-Based & Error-Based are widely used In vulnerable applications to gain back-end access to the database. Content-Based/Boolean-Based & Out-Of-Band SQLi (not so common) are also very effective where applicable. Of course, In order to manipulate the database, sound knowledge of SQL Is paramount.


Thank you for your reply. I will look into it.

RE: How to learn to hack a website? - refa - 09-12-2019

I recommended watch youtube videos and read hacking ebooks if you want ebooks link: https://sinister.li/Thread-Leak-90-Hacking-ebook?pid=901615#pid901615

RE: How to learn to hack a website? - Pot_bastard - 09-12-2019

(09-12-2019, 04:56 PM)Cyb3rc0bra Wrote: I recommended watch youtube videos and read hacking ebooks if you want ebooks link: https://sinister.li/Thread-Leak-90-Hacking-ebook?pid=901615#pid901615

Thank you.

RE: How to learn to hack a website? - mothered - 09-13-2019

(09-12-2019, 04:51 PM)Pot_bastard Wrote:
(09-12-2019, 01:52 PM)Refusal Wrote: I’d recommend looking into the many different techniques then finding one you feel comfortable learning like SQL Injection, XSS, etc etc

(09-12-2019, 03:31 PM)mothered Wrote:
(09-12-2019, 01:52 PM)Refusal Wrote: like SQL Injection

Code Injection Is a very common attack vector.

In-Band SQLi, namely Union-Based & Error-Based are widely used In vulnerable applications to gain back-end access to the database. Content-Based/Boolean-Based & Out-Of-Band SQLi (not so common) are also very effective where applicable. Of course, In order to manipulate the database, sound knowledge of SQL Is paramount.


Thank you for your reply. I will look into it.

You're welcome.

Feel free to ask for assistance as needed.

RE: How to learn to hack a website? - Nork0i - 10-03-2019

I'd say to install Metasploitable2 VM and then use the Damn Vulnerable Web Application (DVWA) tool to learn and improve your skills against a dummy website, you can configure it the way you want too which is good when you're trying to learn certain techniques. Just search metasploitable2 and DVWA in YouTube, there's a tonne of videos.

http://www.dvwa.co.uk/

RE: How to learn to hack a website? - Sikom - 10-03-2019

I have two recommendations. 1. Use linux or other unix based system, as there are quite a few tools that are more accessible on linux.
Secondly I would recommend doing CTF challenges to practice and learn new methods of explotation (legally). A few different ones I got, varying difficulty and subject.
(DISCLAIMER: I am not affiliated with any of these sites in any way, and I can not say anything of their quality)
http://overthewire.org
https://picoctf.com/
https://attackdefense.com/
https://www.hackthebox.eu/
https://ctftime.org/
https://www.root-me.org/?lang=en
https://capturetheflag.withgoogle.com/
https://www.vulnhub.com/
https://crackmes.one/
https://www.holidayhackchallenge.com/2018/
https://www.owasp.org/index.php/Category:OWASP_WebGoat_Project
https://www.owasp.org/index.php/OWASP_Security_Shepherd
https://www.owasp.org/index.php/OWASP_Juice_Shop_Project
https://www.hackthissite.org/
https://cryptopals.com/
https://19.tghack.no/