How to learn Hacking Part 2

Now that you have read the basics here at http://www.decisionstats.com/how-to-learn-to-be-a-hacker-easily/ (please do read this before reading the below)

Here is a list of tutorials that you should study (in order of ease)

1) LEARN BASICS – enough to get you a job maybe if that’s all you wanted.

http://www.offensive-security.com/metasploit-unleashed/Main_Page

2) READ SOME MORE-

Lena’s Reverse Engineering Tutorial-“Use Google.com for finding the Tutorial”

Lena’s Reverse Engineering tutorial. It includes 36 parts of individual cracking techniques and will teach you the basics of protection bypassing

01. Olly + assembler + patching a basic reverseme
02. Keyfiling the reverseme + assembler
03. Basic nag removal + header problems
04. Basic + aesthetic patching
05. Comparing on changes in cond jumps, animate over/in, breakpoints
06. “The plain stupid patching method”, searching for textstrings
07. Intermediate level patching, Kanal in PEiD
08. Debugging with W32Dasm, RVA, VA and offset, using LordPE as a hexeditor
09. Explaining the Visual Basic concept, introduction to SmartCheck and configuration
10. Continued reversing techniques in VB, use of decompilers and a basic anti-anti-trick
11. Intermediate patching using Olly’s “pane window”
12. Guiding a program by multiple patching.
13. The use of API’s in software, avoiding doublechecking tricks
14. More difficult schemes and an introduction to inline patching
15. How to study behaviour in the code, continued inlining using a pointer
16. Reversing using resources
17. Insights and practice in basic (self)keygenning
18. Diversion code, encryption/decryption, selfmodifying code and polymorphism
19. Debugger detected and anti-anti-techniques
20. Packers and protectors : an introduction
21. Imports rebuilding
22. API Redirection
23. Stolen bytes
24. Patching at runtime using loaders from lena151 original
25. Continued patching at runtime & unpacking armadillo standard protection
26. Machine specific loaders, unpacking & debugging armadillo
27. tElock + advanced patching
28. Bypassing & killing server checks
29. Killing & inlining a more difficult server check
30. SFX, Run Trace & more advanced string searching
31. Delphi in Olly & DeDe
32. Author tricks, HIEW & approaches in inline patching
33. The FPU, integrity checks & loader versus patcher
34. Reversing techniques in packed software & a S&R loader for ASProtect
35. Inlining inside polymorphic code
36. Keygenning

If you want more free training – hang around this website

http://www.owasp.org/index.php/Cheat_Sheets

OWASP Cheat Sheet Series

Draft OWASP Cheat Sheets

3) SPEND SOME MONEY on TRAINING

http://www.corelan-training.com/index.php/training/corelan-live/

Course overview

Module 1 – The x86 environment

System Architecture
Windows Memory Management
Registers
Introduction to Assembly
The stack

Module 2 – The exploit developer environment

Setting up the exploit developer lab
Using debuggers and debugger plugins to gather primitives

Module 3 – Saved Return Pointer Overwrite

Functions
Saved return pointer overwrites
Stack cookies

Module 4 – Abusing Structured Exception Handlers

Abusing exception handler overwrites
Bypassing Safeseh

Module 5 – Pointer smashing

Function pointers
Data/object pointers
vtable/virtual functions

Module 6 – Off-by-one and integer overflows

Off-by-one
Integer overflows

Module 7 – Limited buffers

Limited buffers, shellcode splitting

Module 8 – Reliability++ & reusability++

Finding and avoiding bad characters
Creative ways to deal with character set limitations

Module 9 – Fun with Unicode

Exploiting Unicode based overflows
Writing venetian alignment code
Creating and Using venetian shellcode

Module 10 – Heap Spraying Fundamentals

Heap Management and behaviour
Heap Spraying for Internet Explorer 6 and 7

Module 11 – Egg Hunters

Using and tweaking Egg hunters
Custom egghunters
Using Omelet egghunters
Egghunters in a WoW64 environment

Module 12 – Shellcoding

Building custom shellcode from scratch
Understanding existing shellcode
Writing portable shellcode
Bypassing Antivirus

Module 13 – Metasploit Exploit Modules

Writing exploits for the Metasploit Framework
Porting exploits to the Metasploit Framework

Module 14 – ASLR

Bypassing ASLR

Module 15 – W^X

Bypassing NX/DEP
Return Oriented Programming / Code Reuse (ROP) )

Module 16 – Advanced Heap Spraying

Heap Feng Shui & heaplib
Precise heap spraying in modern browsers (IE8 & IE9, Firefox 13)

Module 17 – Use After Free

Exploiting Use-After-Free conditions

Module 18 – Windows 8

Windows 8 Memory Protections and Bypass

TRAINING SCHEDULES AT

http://www.corelan-training.com/index.php/training/training-schedules/ ($995 CAD cost)

ALSO GET CERTIFIED http://www.offensive-security.com/information-security-training/penetration-testing-with-backtrack/ ($950 cost)

the syllabus is here at

http://www.offensive-security.com/documentation/penetration-testing-with-backtrack.pdf

4) HANG AROUND OTHER HACKERS

At http://attrition.org/attrition/

or The Noir Hat Conferences-

http://blackhat.com/html/bh-us-12/training/bh-us-12-training_complete.html

or read this website

http://software-security.sans.org/developer-how-to/

5) GET A DEGREE

Yes it is possible

See http://web.jhu.edu/jhuisi/

The Johns Hopkins University Information Security Institute (JHUISI) is the University’s focal point for research and education in information security, assurance and privacy.

Scholarship Information

The Information Security Institute is now accepting applications for the Department of Defense’s Information Assurance Scholarship Program (IASP). This scholarship includes full tuition, a living stipend, books and health insurance. In return each student recipient must work for a DoD agency at a competitive salary for six months for every semester funded. The scholarship is open to American citizens only.

http://web.jhu.edu/jhuisi/mssi/index.html

MASTER OF SCIENCE IN SECURITY INFORMATICS PROGRAM

The flagship educational experience offered by Johns Hopkins University in the area of information security and assurance is represented by the Master of Science in Security Informatics degree. Over thirty courses are available in support of this unique and innovative graduate program.

———————————————————–

Disclaimer- I havent done any of these things- This is just a curated list from Quora so I am open to feedback.

You use this at your own risk of conscience ,local legal jurisdictions and your own legal liability.

http://poemsforkush.com/2011/11/03/hacker-poem/

Author: Ajay Ohri

http://about.me/ajayohri View all posts by Ajay Ohri