To understand
how most
of the attacks works, you will need to have a basic knowledge about
Networks, Protocols, Operating Systems (Unix &&
Windows), Port scanners, Password crackers, Enumeration, Penetration
Tools (Metasploit Framework), Covering Tracks, Creating Back Doors, DoS
&& DDoS Attacks!
Ok, let's start from the beggining. I am one hundred procent sure that
you have heard (or read) a lot for "White Hats", "Black Hats", "Grey
Hats" and so on ... Lets get straight about this colors and hats. What
does all that mean? First of all let's take a look of what the term
"Hacker" means :
In most of the usage "Hacker" is mistaken with "Cracker". Here are both
of the definitions that you will need at least to read :
Hacker -- In
common usage, a hacker is a person who breaks
into
computers, usually by gaining access to administrative controls. The
subculture that has evolved around hackers is often referred to as the
computer underground. Proponents claim to be motivated by artistic and
political ends, and are often unconcerned about the use of illegal
means to achieve them.
Other uses of the word hacker exist that are not related to computer
security (computer programmer and home computer hobbyists), but these
are rarely used by the mainstream media.
Cracker -- A
person who breaks into a computer system without
authorization, whose purpose is to do damage (destroy files, steal
credit card numbers, plant viruses, etc.). Because a cracker uses
low-level hacker skills to do cracking, the terms "cracker" and
"Hacker" have become synonymous with the latter becoming the most
widely used term.
Now when we all know what "Hacker" and "Cracker" means let's explain
the colors :
White Hat --
A white hat hacker breaks security for non-malicious
reasons, for instance testing their own security system. This type of
hacker enjoys learning and working with computer systems, and
consequently gains a deeper understanding of the subject. Such people
normally go on to use their hacking skills in legitimate ways, such as
becoming security consultants. The word 'hacker' originally included
people like this, although a hacker may not be someone into security.
Grey Hat --
A grey hat, in the hacking community, refers to a skilled
hacker who sometimes acts illegally, sometimes in good will, and
sometimes not. They are a hybrid between white and black hat hackers.
They usually do not hack for personal gain or have malicious
intentions, but may or may not occasionally commit crimes during the
course of their technological exploits.
Black Hat --
Black Hat Hackers (also called "crackers"), are hackers
who specialize in unauthorized penetration. They may use computers to
attack systems for profit, for fun, or for political motivations or as
a part of a social cause. Such penetration often involves modification
and/or destruction of data, and is done without authorization and hence
they should not be confused with ethical hackers.
They also may distribute computer viruses, Internet worms, and deliver
spam through the use of botnets. The term may also refer to hackers who
crack software to remove protection methods: copy prevention,
trial/demo version, serial number, hardware key, date checks, CD check
(NO-CD) or software annoyances like nag screens and adware.
Now when you have a basic knowledge for the most often terms you can
move on to :
TCP/IP/UDP
&& ICMP Protocols
Security Solutions For Networks
Network Mapping
Discovering open ports using Port Scanners
Password Attacks
Web Application Attacks
Sniffing
IP Address Spoofing
Using Metasploit Framework to Exploit vulnerabilities
Hacking Windows
Hacking Linux
Hacking Wireless Router