How to become a hacker

This is brief guide to know where to start an hacking and how.(educational purpose only)

What Is a Hacker?

The Jargon File contains a bunch of definitions of the term ‘hacker’, most having to do with technical adeptness and a delight in solving problems and overcoming limits. If you want to know how to become a hacker, though, only two are really relevant.
There is a community, a shared culture, of expert programmers and networking wizards that traces its history back through decades to the first time-sharing minicomputers and the earliest ARPAnet experiments. The members of this culture originated the term ‘hacker’. Hackers built the Internet. Hackers made the Unix operating system what it is today. Hackers run Usenet. Hackers make the World Wide Web work. If you are part of this culture, if you have contributed to it and other people in it know who you are and call you a hacker, you're a hacker.
The hacker mind-set is not confined to this software-hacker culture. There are people who apply the hacker attitude to other things, like electronics or music — actually, you can find it at the highest levels of any science or art. Software hackers recognize these kindred spirits elsewhere and may call them ‘hackers’ too — and some claim that the hacker nature is really independent of the particular medium the hacker works in. But in the rest of this document we will focus on the skills and attitudes of software hackers, and the traditions of the shared culture that originated the term ‘hacker’.
There is another group of people who loudly call themselves hackers, but aren't. These are people (mainly adolescent males) who get a kick out of breaking into computers and phreaking the phone system. Real hackers call these people ‘crackers’ and want nothing to do with them. Real hackers mostly think crackers are lazy, irresponsible, and not very bright, and object that being able to break security doesn't make you a hacker any more than being able to hotwire cars makes you an automotive engineer. Unfortunately, many journalists and writers have been fooled into using the word ‘hacker’ to describe crackers; this irritates real hackers no end.
The basic difference is this: hackers build things, crackers break them.
If you want to be a hacker, keep reading. If you want to be a cracker, go read the alt.2600 newsgroup and get ready to do five to ten in the slammer after finding out you aren't as smart as you think you are. And that's all I'm going to say about crackers.

Download this samll Guide to know where to start.

Download it from here. Where to start

Hacking Rules

Ok I'm back up at 3 o'clock in the morning to bring you another article..
Many of us out there think of ourselves as hackers but what is a REAL
hacker....Well for those of you out there that play with college computers
and local schools.... you are nothing !!  The making of a real hacker is
being able to find a 'virgin' system and breking in and really doing
someting to it...Hacking is not a term to be used lightly....Not only
that but hacking is also something not to be taking lightly and
flagrently....The reason for hacking....Well you don't hack into a
computer just to wreck it or to destoy it even though it is phun, the
reason to hack into a computer is to learn from it and conquer it... The
idea of actually entering a system, without authorization is life line
of hacking....those out there who know what hacking is knows what to do and
what not to do but what are the basic rules......Well... here's a short
more or less complete list of do's and don'ts on hacking:

I. Do not purposely destroy a system -- What's the use of destorying a
   system anyone....after it's destruction a system is no good and can
   serve you no real purpose

II. Do not leave real names or real handles anywhere on a system -- This is
    the most important thing to remember....you might want to be recognized
    for breaking a system but a signature or trademark can only mean your
    apprehension

III. Do not under no circumstance hack a system directly -- If you really
     plan on hacking a system by running a program or script doing it
     direct could be dangerous if someone see's you attempting to hack
     your call be CAN be traced...The best thing to do in this situation is
     to use a PBX or a outdial of some sort

IV. Do not mess with accounts or defaults -- No matter what kind of urge
    you get , by messing with someones account or messing with the system
    defaults will let the business notice the intrusion of an outside
    presence which more or less means a termination of your access

V. Do not mess with anything you don't know -- Don't go around the system
   trying junk you don't understand cause this can only lead to you messing
   up the system or getting caught

VI. Hack during the out of work hours -- By hacking late at night or early
    in the morning to can escape the chances of someone watching you

VII. Do not post your findings on local boards -- Do not post up new stuff
     you find unless you really want swarms of people at it....A very
     important thing to control is the urge to brag about systems you find
     but this could lead to an abuse of the system which in turn leads to
     the system shutdown....Don't get me wrong about not sharing knowledge
     but you don't want to send something public unless you have made sure
     that you have done all you wanted to do with the system

That's more or less what you don't what to do....things you might want
to do is:

I. Set up a account for yourself -- By setting up an account for yourself
   it will elimanate the chores of finding a backdoor to the system

II. Leech files -- Another thing that should be done if possible is to
    get as many 'interesting' files as you can since they could be useful
    in later hacking quests

III. Fix the security -- If you get a system that has a 'drop' password
     you should really try to fix it so there is none to make life easier
     for the following hackers who attempt to infiltrate the system

IV. Keep track of the system -- No matter how dumg the system might be
    or how impossible the security is you should always keep track of
    all numbers you have

V. Look for interestin items in the system -- Keep an eye for stuff that
   resembles passwords or other numbers since this could lead to new
   systems or usable passwords

That more or less covers that....BUT how do you find 'virgin' systems? Well
this is a part of hacking that all hackers most do....scanning...Scanning
or wardialing was brought to life by the popular hacker movie 'Wargames'
which inspired the war games wardialer....what a wardial or scanner does
is it goes thru all the numbers in a specified prefix.....A good wardialer
or scanner should be able to go thru numbers and be able to store them in
a file which you can go thru later when you're bored....The idea is to find
system beloning to companies and business....it's a good idea to find out
a prefix to lets say your downtown area...

Another thing that most companies also have is frequecies hooked up to
computers... This is a lot tuffer to scan for since you would nee to set up
a HAM radio to go thru frequencies and collect infomation on what
frequencies have carriers on the other ends...This is a fairly difficult
thing to do but he rewards could be great....the most importan thing to
remeber is to scan with the HAM in you car or something.....scanning from
a fixed location will only cause police and FBI to show up at your doorsteps..

When you've located a system don;t get discouraged if you get no response...
many system think that if they set it up to connect at wierd parity's or
stop bits and baud rate it's all the security so it is very important to
find a communication program that will allow to do wierd things such as
connecting at 1100 bauds and 1800 bauds....also to be able to set the parity
to mark and space...

Well I hope this phile helps you starters...I'm going to crash now I've
done my good deed for the day....well keep hacking but remember to hack
safe!

                                             Have phun

                                                StYLe

                                                 formaly ThE gH0sT


                 formaly ThE gH0sT

Web hacking techniques

HEY  EVERYONE TODAY I WILL BRING YOU THE MOST POWERFULL TECHNIQUES FOR WEB HACKING

EDUCATIONAL PURPOSE ONLY.

The first step in hacking website Or any kind of hacking Is the collection of information The latter are determined that you are able to penetrate the site But before going to all this you Should know That the site such as any computer The difference between him and the normal computer It's fast and advanced Which is called the server

To run this server in browser must be installed a web server like Apache HTTP Server and you can install this apache in your computer Will use the space on your computer But the difference that the domain will be 127.0.0.1 Even if you bought a domain and linking it to your computer Is your computer will remain connected 24/24h :) Of course not. I hope that they have reached the idea

Collection of information :

 First we have to find IP Of the site is very easy Go To : Start  --> Run ---> CMD

Ping www.site.com 

                                                            

When we get the IP If we are to really penetrate the Site We have to see if that site alone in the server Or with multiple sites

If the site alone in the server It will be difficult But if it was with many of the site in the same server Would be easy Because the discovery of any error in any of these sites Will be the key to penetrate the Site There are generally many of the goals behind the break sites When you can access the database You'll find lots of stuff Names registered on the site, as well as passwords Or if it penetrated a shopping site Will be able to withdraw all Card Visa That payment by customers In this type of penetration must be careful

Generally when you get the IP Go to Bing.Com and Put  [ IP:127.0.0.1]

 Of course Replace 127.0.0.1 لاy the ip of target site then you will see Sites in the server

There are many websites offering a basic WHOIS lookup service like whois.domaintools.com Gives information about the owner of the site And many

BASIC
Basic 1_

Some of you who are very stumped or are new to hacking may just think, hm what shall I do, here's what you do! Download FireFox (http://getfirefox.com) and press Ctrl+U, or if you can't get a hold of fire fox just find a way to view the source.
Once you are in the source you need to know what a html comment looks like, for those who don't know, it's <!-- comment here -->. So, in the source do a search (Ctrl+F) and find any comments. Once you have found the right comment, you should know what it is, work it out and then type the answer in the password box and hit submit, then basic 1 is out the way, on to basic 2.

Basic 2_


Aha, Drake has learnt about the <iframe> tag! If by now you still don't know any html, an iframe allows you to embed a webpage inside a webpage. So, again we need to view the source, and then do another search, this time search "<iframe" without the quotes of course, this will show you where the iframe is reading from. When you have found it you have put the exact "src" or it in the box. Wooo basic 1 and 2 are over! Basic 3 here we come!

Basic 3_


Hm, you may be thinking "What's a user agent?", well a user agent is your browser and platform/OS, and for this challenge you need to change your user agent, if you still haven't got firefox and you're in IE, you're a bit stuck, you see, in firefox you can get an extension which lets you change your user agent (http://chrispederick.com/work/useragentswitcher/) but in IE, you have to spend a long time in regedit trying to change it. Once you have firefox installed and the user agent switcher you just have to edit the user agent to the right string (bwh3_user_agent). Woooo more points! Basic 4 now...

Basic 4_


This one is pretty straight forward, as you see you get this: " ERROR: htpasswd.php file not found in basic4/" which tells up the file "htpasswd.php" is not in the /basic4/ directory, so all you have to do is move up a dir!

Basic 5_

This one is tricky, all you have to know is that an asterisks is a wild card - it can mean anything. So for username and password it would be *:* and an e-mail would be *@*.*, so from that you should be able to figure it out.

Basic 6_

Hurray! Basic 6! Unix! For this you'll need to know some basic unix commands. The first is chmod, this command allows you to change permissions of a file. On this challenge you need to chmod the logs/logs.txt then remove it. So what we have to do is chmod it to all and execute (chmod a+x). After you've entered the chmod command into the first box we have to remove it, this command is "rm". After that, you have to remove the track_logs.php file to stop you getting tracked.

Basic 7_


Right, for those who just went ahead with sql injection as soon as they saw the word "sql", you've wrong, but, for those who read the description through well, you may notice it says "This time Mr. Deitry decided to make a cookie login script and he said he decrypted it from ASCII encryption"
For some of you, you may be thinking "What's ASCII encryption?!" Well, I'll give you a hint, 011000100110100101101110011000010111001001111001. Now, time to check our cookies to see what we need to decrypt! If you have alerted the cookies (javascript:alert(docu<i></i>ment.cookie), you should see that the username is sam and the pass is jillisdead, so what are you waiting for, encrypt it already! For this we will need to do a javascript injection. Enter in your address bar:
javascript:void(docu<i></i>ment.cookie="username=binary encrypted text");
Replacing the "binary encrypted text" with, yep you guessed it, the binary encrypted text! Then all that's left is to refresh. And now time for a nice little sql injection.

Basic 8_


Right, basic 8, this time we need a lengthy sql injection, not just a ' or 1=1-- injection. In the password box type any random word and hit enter, you should get an sql error. Now if you view the source and look for comments again you can see <!--?sql_query-->Wrong SQL query, for those who know some basics of web coding, you can put things on the end of file names with a question mark, for example: something.php?variable=something. This would work using a $_GET of the name "variable".
So, we know that this script uses $_GET['sql_query']; Now if you look at the name of the variable "sql_query" you should be able to work out what it may do. So try some sql queries using the sql error we got earlier.

Basic 9_


Alrighty, just over half way to finishing the basics! In basic 9's description, you should notice that the file search utility searches for files in the directory /files/. So, if we take a look at http://www.hellboundhackers.org/challenges/basic9/files/ you can see there's a login.php file! By now, you should know that the source of a login usually contains the user and password unless it does a database query, now, if we go back to the file searcher, and put in "login.php" we can see that it's a real login. Obviously you can't view the raw php code of web pages because it gets parsered, but, there's an exploit called the Poison NULL Byte, for those who haven't heard of it it's when you add on to the end of things, such as page.php?file=config.php, this could show you the source of the config.php file. In this challenge we need the source of login.php, so try searching login.php with a poison null byte on the end.

Basic 10_


Ok then! You may or may not know what a proxy is, but you should know what an IP is, if not: an IP address is basically the address of your computer. And, what a proxy does is, it kind of changes your IP, for this challenge you need to get a proxy that's in the right range to get into /admin/. Those who are on ntl internet may have problems with this challenge as ntl gives you what's called a "shared IP", it's basically a proxy but it means you can't change it :(

Basic 11_


Hurrah! User agents again, this time we need to change the user agent and the OS, for those who done basic 3 with the user agent switcher plugin may notice that on the user agents that are already there it says things like: Internet Explorer 6 (Windows XP), this tells us that they are running Windows XP and using IE6, so it shows that user agent strings are like this: User agent (Operating system)
Now what's left is to change your user agent and refresh.

Basic 12_

Okie doodle doo, you should notice when you click Basic 12 on the basic.php page it goes to: basic12/index.php?page=challenges.php
This is called file inclusion, and this can be exploited. You see, we need to get the user:pass combination from the /protected/ folder, this folder is passworded with .htpasswd/.htaccess, so if we try and include the .htaccess file it may give us the password file :) Now once we have the hash, we need to crack it, it's encrypted with DES, this can be easilly cracked with John The Ripper (http://openwall.com/john/). Alot of people struggled trying to crack this, as if you try and brute force it, it may take weeks, you need a wordlist, google for one. Once cracked, go to the protected folder and enter in the username and password to get the points.

Basic 13_


Right, basic13, you are told to log in as George, but what's this?! There is no George!!! Oh my god!!!!!!!! Well, being the elite hacker that you are you can manipulate the form :D So, save the page to your hard drive and modify the values in the form, don't forget to make it post to the hbh site.

Basic 14_


Hm, again with the source...in this one, when you find the comment, you are told to go to a certain file to get the "new password". Once you've gotten it go and get your points.

Basic 15_


Soooooo, we get told a file that hides directories, what could it be? It's something.txt! What, you thought I'd give you the answer? *tsk tsk* Go and google. Once you have the _real_ file then you can get your points wooooooooo.

Basic 16_


Hooray! Only one more to go! On this one, you are told it's vulnerable to SQL Injection, so what are you waiting for, inject already!!! Right, now you're done.

Basic 17_

Yay, the last one! For this one, you'll notice your PC may lag when you first attempt it, that's because it's a java applet and a lot of PC's hate them, especially mine, it freezes up everytime a java applet runs, but anyway, if you view the source you can see that there's a file, basic17.class, so let's download it.
Once you have that downloaded, you'll need to open a certain program to read it, google for a decompiler for this file type, once you have a decompiler, open this file with it and you should be able to see the java source code, if you look you should see the password, so go back to /challenges/basic17 and enter the password, a new window will open and then you'll receive your points! Bang, another mission down :p


Thank you for reading my POST, I hope it has helped you.