+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.li/Forum-Website-Server-Hacking)
+--- Thread: Looking to get into Website Exploitation (/Thread-Looking-to-get-into-Website-Exploitation)
Looking to get into Website Exploitation - Eclipse - 02-04-2014
Hey guys,
The world of website exploitation has fascinated me for a long time. How a hacker can exploit a small thing and deface or steal data from a site/server.
I'm looking to get into this field so I want some advice on what I should learn. For example; languages, terms, systems etc.
Thank you for any help in advance.
-Sparky
RE: Looking to get into Website Exploitation - Adorapuff - 02-04-2014
My advice, learn PHP and MySQL if you want to get into web exploitation, or C++ and some basic assembly if you want to learn appsploitation and reverse engineering. Don't straight up learn SQLi without knowing what it does.
RE: Looking to get into Website Exploitation - w00t - 02-04-2014
As with any form of exploitation, the key is to understand how the program works. In most cases, that means knowing the language it was programmed in better than the developer of the program.
RE: Looking to get into Website Exploitation - Cressi - 02-04-2014
(02-04-2014, 03:07 PM)Adorapuff Wrote: My advice, learn PHP and MySQL
This is how I started out; and probably the best way I can figure to start out.
RE: Looking to get into Website Exploitation - Zayne - 03-24-2014
You should learn the programming languages to understand how it works behind the scene. Trust me, you'll get the glam of it a lot better and you will be able to read 0days & other material a lot easier.
RE: Looking to get into Website Exploitation - misnar - 03-24-2014
(03-24-2014, 07:29 PM)Zayne Wrote: You should learn the programming languages to understand how it works behind the scene. Trust me, you'll get the glam of it a lot better and you will be able to read 0days & other material a lot easier.
>read 0days
is this a joke?
RE: Looking to get into Website Exploitation - Zayne - 03-24-2014
(03-24-2014, 07:45 PM)misnar Wrote: >read 0days
is this a joke?
I more meant exploits, e.x. from exploit.db or such. To understand how they work before performing them.
RE: Looking to get into Website Exploitation - ParaZite - 03-25-2014
Your best start is to understand the language of PHP and SQL. You should also research to understand how MySQL works along with exactly how SQL injection works. I would also recommend getting a little background knowledge on cryptography as we all know MySQL has standard MD5 password encryption but can be edited at any time by the website owner.
So learn PHP, SQL, know how SQL injection works, and get a little research in on cryptography and algorithms.