+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.li/Forum-Website-Server-Hacking)
+--- Thread: Where to start (/Thread-Where-to-start--50009)
Where to start - TheB0th - 06-07-2013
Hi,
I'm interested in website hacking and I would like to know where to start to learn it.
I know C Language and a bit of c# and PHP, even if I don't know if they are useful to it.
I don't want simply click some buttons and "All Done"....I want to understand how things work.
I hope for an help
RE: Where to start - RogueCoder - 06-07-2013
I suggest you start looking into sql injection and cross-site scripting. These are the most common vulnerabilities even though sql injections are getting less common these days, there's still a lot of vulnerable sites out there
You should read these tutorials
My SQL injection complete tutorial by @V1P3R
Basic xss tutorial by @Anima Templi
To get some real hands on practice you should check out the "Targets for training" and "Self-Hosted Vulnerable Web Applications" sections here
You should also learn; HTML and JavaScript. This will give you a basic foundation to continue to build on
RE: Where to start - TheB0th - 06-07-2013
Thank you so much, I start reading them
RE: Where to start - chmod - 06-08-2013
Question answered by @shp0ngl3
Marked as solved and closed accordingly
RE: Where to start - Anima Templi - 06-08-2013
(06-07-2013, 11:55 PM)TheB0th Wrote: Thank you so much, I start reading them
Most of it have already been answered, but I would like to add the importance of knowing the different programming languages. Especially PHP is important, since most XSS vulnerabilities and such are found in bad coding. Javascript, will also be a deal breaker because you will also have to know this to be succesful with XSS. For SQL injections you should look into the SQL query language. I think you can guess by the names why it's important? You should not focus that much on HTML it's been ages since I have seen actually vulnerabilities in HTML and minimal knowledge about it more than enough to study web exploitation.
- Oh and for the PHP learn that in-depth since it's the most important language to know if you want to be succesful with this, when you have learned PHP study secure programming in it. This will help you identify the vulnerabilities by looking at the source and frankly it's where you will find most of your vulnerabilities.