Los enlaces son solo para miembros. Registrate o iniciá sesión
<br /><br />The main motivation for this post is that it seems more and more common (if not more common, then far too common) to find people asking how to get started in the world of hacking. <br />Talking in the WhatsApp group, we discussed that there is a whole set of knowledge we consider necessary to get started in computer security. For reasons that aren't relevant here, I prefer to call it computer security. xD<br /><br />The intention of the post is not to explain systems, services or networks, but simply to list this knowledge and perhaps, if you think it necessary, add a hyperlink to some explanation. The idea is for the post to be expanded with things you consider necessary. <br /><br />Systems: <br />- User and group administration<br />- Package systems in GNU/Linux<br />- Permissions, GPOs<br />- Registry<br />- File systems<br />- Boot managers<br />- Active Directory / LDAP<br />- Domains<br />- System monitoring<br />- Use of logs<br />- Processes and priorities<br />- BASH and POWERSHELL<br /><br /><br />Networks:<br />- Network types and topologies<br />- OSI model<br />- Ethernet<br />- IPv4 addressing, Subnetting, CIDR, VLSM, IPv6<br />- TCP, UDP, ICMP, ARP<br />- Collision and broadcast domains<br />- ACLs<br />- VLANs<br />- Routing, RIP, OSPF, BGP, EIGRP<br />- Types of NAT<br />- VPN, SSL, IPSec<br />- Firewalls, IDS, IPS<br />- 802.11 and other wireless technologies<br /><br />Databases:<br />- Principles of the entity-relationship model, normalization<br />- Creating and modifying databases.<br />- Queries<br />- SQL - PL/SQL<br />- Logs<br /><br />Services:<br />- Client-Server model<br />- HTTP, HTTPS<br />- DNS<br />- FTP<br />- Telnet<br />- SSH<br />- SCP<br />- X11<br />- POP3, IMAP<br /><br />Programming:<br />- Algorithm fundamentals<br />- Some scripting language, to taste.<br />- C#, C++, JAVA or some other language.<br />- Pointers, memory management<br />- Use of Debuggers, Compilers<br />- For web topics, HTML, CSS, Javascript, PHP...<br /><br />English<br />- As we advance and go deeper we will find English increasingly necessary, since a large part of the documentation is in that language.<br /><br />You have to understand that many of these topics become cross-cutting to computer security as you "go deeper" into them. Knowing what SSH is is not the same as knowing how to use it and harden it.<br />I'll add any contribution of knowledge you consider important. Maybe some people won't consider many of these things important for using many tools. And they're right. But the goal when studying computer security shouldn't be knowing how to use tools, it should be understanding them. Knowing how to use Zenmap/Nmap is useless if we don't know what an ACK is.<br /><br />P.S. I'm sure I'm forgetting to include many things...xD<br /><br />EDIT1: Added suggestions from @animanegra<br />EDIT2: Added suggestions from @Codig0Bit<br /><br /><br /><br /><br />Regards!🌐 This is an automatic translation of a topic from Underc0de, the largest Spanish-speaking hacking and IT community. Read the original (Spanish) and reply →
<br />Very good guidance @Bael. Well organized, which is a welcome plus for the reader. <br />Since it's a very frequent question, and given how neat it is, I'll pin it.<br />+1<br /><br />I invite you to keep adding ideas, along the same line or style.<br /><br />Regards<br /><br />Gabriela
It would be good if you could post some manuals, PDFs or videos to start learning each of those topics
So when someone asks "I want to be a hacker" I'll send them the link to the post. What's more, you should make it a topic and provide more information, thanks for the contribution.
Excellent information... Or pointers to start looking for information on the mentioned topics :) <br /><br />Sent from my D2533 using Tapatalk<br /><br />
I thought the post was very good and I think you should go deeper into each of the topics...<br />And give us knowledge for people like me who are just starting out in this
Very interesting information. I liked it a lot.<br /><br />Sent from my Samsung Galaxy S6 edge plus<br /><br />
Cita de: Anon0103 en Febrero 25, 2017, 03:22:47 PM<br />I thought the post was very good and I think you should go deeper into each of the topics...<br />And give us knowledge for people like me who are just starting out in this<br /><br /><br />The idea is that everyone looks for the information themselves.
Very interesting information for those of us who had doubts about how to get started in this world.
Hi:<br />I'll mention a few more ideas, maybe you'll find them horrible or maybe not.<br /><br />In networks I might expand it with:<br />ethernet<br />ARP<br />HTTP HTTPS<br />DNS<br />And I'd almost summarize it as: do you know what happens from the moment you type a URL in your browser until you receive the response packet with the website?<br /><br />In the DB part I might include:<br />SQL (I know it seems inherent in creation and modification, but with graphical interfaces you can do those things without touching SQL)<br /><br />In the programming part I might include:<br />pointers (to variables, to functions...)<br />How the computer organizes memory internally when running a program (stack memory, program memory, etc...) Without this, understanding a buffer overflow, changing the rts return address and injecting the payload, etc... is complicated.<br />Using some debugger gdb, ddd or similar
Sounds perfect, the idea was to keep adding things, but it stayed at the first version xD. I've put HTTP in Services, which is where DNS was. I think it's better that way, because I understand it includes how it works, which does touch more on networks, and some configuration. Anyway, if you think it would be better structured another way, it's just a matter of reworking it.<br /><br />As I've said other times, I don't link to any site explaining each thing, because it's not hard information to find, and everyone will have their own preferences regarding how it's explained. Also, many topics can be covered at different levels of depth, and I think it's better for everyone to search and go as deep as they like.<br /><br />Regards!