In popular media, hackers are often portrayed as evil characters who illegally access computer systems and networks. In fact, hackers or hackers are actually individuals who have a broad understanding of computer systems and networks. Some "evil" hackers (known as black hats) do use their abilities for illegal and unethical purposes. There are also some hackers who use hacking abilities to challenge themselves. Meanwhile, “good” (white hat) hackers use their expertise to solve problems and strengthen security systems. These hackers use their abilities to catch criminals and fix vulnerabilities in security systems. Even if you don't intend to hack into any computer or device, it's a good idea to know how hackers work to avoid becoming a target for them. If you're ready to jump in and learn the art, this wikiHow will teach you some helpful starting tips.
Step
Part 1 of 2: Learning the Skills Required for Hacking
Step 1. Understand what hacking is
Broadly, hacking refers to a variety of techniques used to abuse or access digital systems. This digital system can refer to a computer, cell phone, tablet, or the network as a whole. Hacking requires a variety of special skills. Some skills are technical. Meanwhile, other skills are more psychological. There are different types of hackers who are motivated by various reasons or goals.
Step 2. Get to know hacking etiquette
Despite the image of hackers in popular culture, hacking is not really a good or bad thing. Hacking can be done for both purposes. Hackers are actually people who have the ability or expertise in the field of technology, and want to solve problems and jump boundaries on the system. You can use your skills as a hacker to find solutions, or you can create trouble and engage in illegal activities.
-
Warning:
Accessing a computer that you don't own is illegal. If you want to use your hacking skills for such purposes or purposes, remember that out there, there are many hackers who use their abilities for good things (known as white hat hackers). Some of them get big salaries for catching bad hackers (black hat hackers). If you get caught by another (good) hacker, you could end up in jail.
Step 3. Learn how to use the internet and HTML
If you want to hack a system, you need to know how to use the internet. Not only do you need to know how to use a web browser, but also more complicated search engine techniques. You should also know how to create internet content using HTML code. By learning HTML, you can develop good mental habits that can help you learn programming.
Step 4. Learn how to program
Learning programming languages does take time so you need to be patient. Focus on learning to think like a programmer, rather than learning the programming language itself. Also, focus on concepts that are similar in all programming languages.
- C and C++ are programming languages used to create Linux and Windows. This language (and its constituent languages) teaches something very important in hacking: how memory works.
- Python and Ruby are "powerful" high-level scripting languages. Both are usually used to perform various tasks automatically.
- PHP is a programming language that is worth learning because most web applications use it. Meanwhile, Perl is the right choice in this field or scope.
- Bash scripting is a must. With this scripting, you can easily manipulate Unix or Linux systems. You can use these languages to write code or scripts that can perform a variety of tasks.
- Drafting language is the language you should know. This basic language is understood by the processor, and there are several variations of it. You can't fully exploit a program if you don't know how to structure it.
Step 5. Get an open source operating system based on Unix and learn how to use it
There are various operating systems based on Unix, including Linux. Most of the web servers on the internet are based on Unix. Therefore, you need to learn Unix if you want to hack the internet. Also, open source systems like Linux allow you to read and modify the source code so you can disassemble or repair it.
There are various Unix and Linux distributions. The most popular Linux distribution is Ubuntu. You can install Linux as the main operating system or create a Linux virtual machine. You can also dual boot a computer with Windows and Ubuntu
Part 2 of 2: Hack
Step 1. Secure your device first
Before hacking, you need a system to practice good hacking skills. However, make sure you have authorization to attack the target. You can attack the network yourself, ask for written permission, or build a lab with virtual machines. Attacking the system without permission (regardless of the content) is illegal and risky get you caught up in the punishment.
Boot2root is a system specifically designed to be hacked. You can download this system from the internet and install it using virtual machine software. After that, you can practice hacking the system
Step 2. Identify the target of the hack
The process of gathering information about the target is known as enumeration or enumeration. The goal is to establish an active connection with the target and look for vulnerabilities that can be exploited to exploit the system further. There are a variety of tools and techniques that can help you with the enumeration process. This procedure can be performed on a variety of internet protocols, including NetBIOS, SNMP, NTP, LDAP, SMTP, DNS, as well as Windows and Linux systems. Here is some of the information you will need to obtain and collect:
- User and group name.
- Host name.
- Network sharing and services.
- IP and routing table.
- Service settings and audit configuration.
- Applications and banners (banners).
- SNMP and DNS details.
Step 3. Test the target
Can you reach the system remotely? While you can use the ping tool (included with most operating systems) to find out if a target is active or not, you can't always rely on the results of the ping test. The ping test relies on the ICMP protocol which can be easily turned off by a “paranoid” system administrator. You can also use tools to check your email and find out which email server you are using.
You can find hacking tools by looking for them on hacker forums
Step 4. Run a scan on the port
You can use a network scanner to run a port scan. This scan shows the open ports on the machine/device and operating system, and can even tell you the type of firewall or router in use so you can design the action you need to take.
Step 5. Look for an open address or port on the system
Some common ports such as FTP (21) and HTTP (80) are usually well protected and may only be vulnerable to undetected/popular exploits or attacks. Try other TCP and UDP ports that are often forgotten (eg Telnet), as well as various UDP ports that are left open for LAN gaming.
An active port 22 usually indicates that an SSH (secure shell) service is running on the target computer/device and can sometimes be brutally attacked (brute-force)
Step 6. Hack password and authentication process
There are several methods to hack passwords. These methods include:
- ” Brute Force ”: A brute-force attack will attempt to guess a user's password. This form of attack is useful for accessing easily guessed passwords (eg “password123”). Hackers usually use tools that can quickly guess various words from a dictionary to crack passwords. To protect your account or computer from attacks like this, don't use simple words as passwords. Make sure you also use a combination of letters, numbers, and special characters.
- ” Social Engineering or Social Engineering ”: In this technique, the hacker will contact the user and trick him into giving out his password. For example, a hacker will pose as an IT department staff and notify the user that he needs his password to deal with certain constraints. Hackers can also dig through databases for information or try to access “secure rooms”. Therefore, never give your password to anyone, regardless of their identity. Always destroy documents that are not used and contain personal information.
- ” Phishing or Phishing ”: In this technique, the hacker sends a fake email to someone and pretends to be an individual or company that the target trusts. The email contains an attachment that will install a surveillance device or typewriter. The message may also display a link to a fake (hacker-created) business website that at first glance looks authentic. The target is then asked to enter his personal information which the hacker can then access. To avoid scams like this, don't open untrusted emails. Always ensure the security of the websites you visit (usually have an "HTTPS" element in their URLs). Go to the required business site directly, instead of via a link in an email.
- ” ARP Spoofing ”: In this technique, hackers use an app on their phone to create fake WiFi access points that anyone can use in public places. Hackers name the access points in such a way as to make the network look as if it is managed or owned by a particular store or business. People using these networks suspect that they are logging into a public WiFi network. After that, the application will record all the data sent and received by the people who are connected in the network. If they log into the account using their username and password from an unencrypted connection, the app will store that data so hackers can access their account. So that you don't fall victim to this type of hack, talk to the owner or store clerk to make sure you're using an appropriate internet access point. Also make sure the connection is encrypted by looking for the lock icon in the URL. You can also use a VPN service.
Step 7. Get super-user privileges
Some of the attention-grabbing information will be protected so you need a certain level of authentication in order to access it. To view all the files on your computer, you need superuser or super-user privileges. This user account has the same rights as the " root " user on Linux and BSD operating systems. For routers, this account is the same as the default "admin" account (unless the account has been changed); for Windows, the superuser account is an administrator account. There are a few tricks you can use to get superuser privileges:
-
” Buffer Overflow:
” If you know the layout of the system memory, you can add input that cannot be stored by the buffer. You can overwrite the code stored in memory with your own code and control the system.
- On systems such as Unix, a buffer overflow occurs when the setUID bit in the bugged program is set to store file permissions. The program will be executed by another user (eg superuser).
Step 8. Create a “back road”
Once you get full control of the target device or machine, make sure you can access the device or machine again. To create a “background”, you need to install malware on critical system services (eg SSH servers). This way, you can bypass the standard authentication system. However, this backdoor can be removed in the next system upgrade.
Experienced hackers will create loopholes in the compiler so that any compiled program has the potential to be a way to get into the target device or machine
Step 9. Hide your tracks
Don't let the target device administrator find out that the system has been abused. Do not make changes to the website. Don't create more files than necessary. Also, don't create additional users. Act as soon as possible. If you are patching on a server such as an SSHD, make sure your secret password is hard-coded. If someone tries to log into the system using that password, the server can grant him access, but will not display any crucial information.
Tips
- Using the above tactics on the computers of a popular company or government agency will only create problems unless you are an expert or professional hacker. Keep in mind that there are people with more knowledge than you who work to protect these systems. When hackers are found, they will keep an eye on them and let them admit their own mistakes before legal action is taken. Therefore, you may feel you have “free” access after hacking a system. However, you are actually being watched and can be stopped at any time.
- Hackers are the ones who “shaped” the internet, created Linux, and used open source programs. It's a good idea to read up on the facts about hacking because this field is actually quite well-known. Hackers also need professional knowledge to take serious action in a real environment.
- If the target doesn't succeed in stopping your efforts, remember that you are not necessarily a good hacker. Of course, you shouldn't be too big on your head. Don't think of yourself as the best hacker. You have to become a better person and make that your main goal. Your day is wasted when you don't learn something new. The most important thing is you. Try to be a person or show the best side. Don't take half steps. You have to put in full effort. As Yoda put it, "Do it or not. There's no such thing as 'trial and error'."
- Try reading a book that discusses TCP/IP networks.
- There is a big difference between a hacker and a cracker. Crackers are individuals with malicious motives (e.g. illegally earning money), while hackers seek to obtain information and knowledge through exploration (in this case, “bypassing security systems”).
- Practice hacking your own computer first.
Warning
- Be wary if you find it easy to find loopholes or errors in the security management of certain systems. The security specialist protecting the system may try to trick you or activate a honeypot.
- Don't hack the system just for fun. Remember that network hacking is not a game, but a force that can change the world. Don't waste time on childish actions.
- If you're not confident in your abilities, don't hack into corporate, government, or military networks. Despite having weak security systems, these agencies may have large funds to track and arrest you. If you find a loophole in the network, it's a good idea to report it to a more experienced and trustworthy hacker so he can exploit it wisely.
- Do not delete the entire log file. Just remove the "suspicious" entries from the file. However, the question is, is there a backup for the log files? What if the system owner looks for the differences and finds the thing you deleted? Always rethink your actions. The best thing to do is to delete the rows in the log at random, including the rows you created.
- Don't help anyone patch a program or its system, even though you may have heard advice to the contrary. This is considered ugly and risks getting you banned from most of the hacking community. If you want to release the results of a private exploit that someone finds, that person can become your enemy. In addition, he may also be more proficient or intelligent than you.
- Misuse of the information in this article can be considered a criminal act, both at the local and/or provincial level. This article is intended to provide educational information and it should only be used for ethical (and not illegal) purposes.
- Hacking someone's system can be considered illegal so you shouldn't do it unless you have permission from the owner of the system you want to hack, and you believe the hack is worth trying. Otherwise, you could be arrested by the authorities.
