Results 1 to 40 of 53

Thread: how do hackers hack?

Hybrid View

Previous Post Previous Post   Next Post Next Post
  1. #1
    Join Date
    Jun 2004
    Location
    working:(
    Posts
    3,337

    how do hackers hack?

    do they have programs they use or is it all in some sort of code?

  2. #2
    very quietly

  3. #3
    Join Date
    Oct 2005
    Location
    901 N 2nd St Philadelphia
    Posts
    2,492
    there's no one answer to that question.

    read this to get your career in crime off the ground. It shows advanced searches through Google to find vulnerabilities on websites. Gotta love Google, they find everything.

    http://johnny.ihackstuff.com/index.p...le=prodreviews

  4. #4
    Join Date
    Dec 2003
    Location
    Texas
    Posts
    792
    Quote Originally Posted by Lavinco
    there's no one answer to that question.

    read this to get your career in crime off the ground. It shows advanced searches through Google to find vulnerabilities on websites. Gotta love Google, they find everything.

    http://johnny.ihackstuff.com/index.p...le=prodreviews

    You think Johnny's taking note of IP addys for future victims?



  5. #5
    Join Date
    Aug 2005
    Location
    gates of hell
    Posts
    5,722
    Hacking just refers to getting into a system. Just like there is not one way to break in a locked house, there are many different ways, depending on the system, to get in. Hackers are good people, while Crackers are not. Big difference. The teen trying to deface websites with "you suck" is a cracker.

  6. #6
    Join Date
    Oct 2004
    Posts
    141
    "Hacking" is malicious. They know right off the bat, if they get caught, they are in deep ish. Remote access to a system (secure or not) your not suppose to be on, for example. "Cracking" is more software/piracy related. Someone that uses pre-written software to hack a website, or crack a serial for some software, is know as a "script-kiddie". They have no skill, but yet take credit for accomplishments.

  7. #7
    Join Date
    Sep 2005
    Posts
    2,224
    Quote Originally Posted by aspengc8
    "Hacking" is malicious. They know right off the bat, if they get caught, they are in deep ish. Remote access to a system (secure or not) your not suppose to be on, for example. "Cracking" is more software/piracy related. Someone that uses pre-written software to hack a website, or crack a serial for some software, is know as a "script-kiddie". They have no skill, but yet take credit for accomplishments.

    Very well put.. For the most part what you will encounter today are script-kiddies. Once an exploit is found such as in the popular phpbb.com forum the exploit will be spread underground by all these kids and they will grub the web for phpbb forums and exploit them. Most are done using hack "tools" that take zero skills but if you go to zone-h.com you will see lists of sites that have been hacked, defaced and whatever. They run contests (not zone-h) but hacker groups to see who can deface the most sites in a set time. As a person that runs many many web servers these guys are always trying to get into our systems and unfortunately we have had a couple. We actually had a Real hacker get in as "root" on one of our boxes and set up a spam system and shot out about 100k spams before we caught him (of course that was within 30 minutes or so). We removed his spam tools and it pissed him off so he wiped the data stripe clean.. not pretty.. We do on-server and off server backups so it only took a few hours to restore but what a pain in the arse it was.

    why do people hack?? because they can't lift weights.


    Oldman

  8. #8
    Join Date
    Jul 2005
    Location
    St. Paul, MN
    Posts
    1,475
    Quote Originally Posted by powerliftmike
    Hacking just refers to getting into a system. Just like there is not one way to break in a locked house, there are many different ways, depending on the system, to get in. Hackers are good people, while Crackers are not. Big difference. The teen trying to deface websites with "you suck" is a cracker.
    Sorry to bust your bubble, but hacking is neither good nor bad. Its the person in control, and everyone is different. Cracking is neutral also. You can write a cracker to test an applications security potential for testing purposes, but that doesn't necessarily mean you're bad. There are many people trying to deface websites also, not just teens. Hacking does not refer to getting into a system. Hacking more or less, in a nutshell, is doing something the code is not usually permitted to do. You can hack many things, and there isn't an actual system on the other end.

  9. #9
    take a look at knoppix std.

  10. #10
    Join Date
    Dec 2005
    Location
    Washington DC
    Posts
    253
    I am an IT major, and I can tell you that hackers are fu#king smart people bro. Hacking is some very sophisticated shit!

    A hacker can do port scans to search for open ports and enter your machine for one.

    It's a whole world of hi tech crap out there.

  11. #11
    Join Date
    Oct 2004
    Posts
    141
    Quote Originally Posted by ironmike250
    I am an IT major, and I can tell you that hackers are fu#king smart people bro. Hacking is some very sophisticated shit!

    A hacker can do port scans to search for open ports and enter your machine for one.

    It's a whole world of hi tech crap out there.
    Someone that uses Ethereal to do a port scan is not a hacker, they are script kiddies.

  12. #12
    Join Date
    Aug 2004
    Location
    Deutschland
    Posts
    8,787
    Quote Originally Posted by ironmike250
    I am an IT major, and I can tell you that hackers are fu#king smart people bro. Hacking is some very sophisticated shit!

    A hacker can do port scans to search for open ports and enter your machine for one.

    It's a whole world of hi tech crap out there.

    Its not that high tech bro (depends i will agree on what you are trying to do)...shit get a laptop and a wireless card and a network/package sniffer and drive around and see what you find...plenty of morons out there running wireless networks without encryption/security.

    Not that hard.

  13. #13
    anyone go to black hat this year (or any other year)? if you're interrested in that stuff, thats the place to be every year. this past year it was down in vegas. lots of cool stuff. the thing they do every year is set up a super protected computer and have teams to see who can be the first to crack it.

  14. #14
    Join Date
    Jan 2006
    Location
    NATO Land
    Posts
    0
    most of the hackers pay other hackers to do their job

  15. #15
    Join Date
    Oct 2002
    Location
    6'0"/248lbs
    Posts
    6,982
    ANyone ever put a connection to the hardware manufacturers? I mean, virus can generate new computer sales for the average Joe Computer Owner... "computer has been acting slow and messed up lately - time to buy a new one!"

    Not to start a conspiracy theory but big business has shown deviant ways to raise their bottomline's before... many times before... got to make the stock holders happy...

  16. #16
    Join Date
    Jan 2005
    Location
    PA
    Posts
    30,963
    If i can write a string command in JAVA saying, "Hello and welcome to JAVA" Does this make me a hacker ?

  17. #17
    Join Date
    Oct 2004
    Posts
    141
    Quote Originally Posted by DSM4Life
    If i can write a string command in JAVA saying, "Hello and welcome to JAVA" Does this make me a hacker ?
    No, it makes you a new student in a JAVA programming 101 class.

  18. #18
    Join Date
    Jan 2005
    Location
    PA
    Posts
    30,963
    Quote Originally Posted by aspengc8
    No, it makes you a new student in a JAVA programming 101 class.
    Naaa i can make madddddd infinite loops.

  19. #19
    Join Date
    Nov 2005
    Location
    Washington state
    Posts
    1,248
    Well i have some background in this.. from my younger years. I used to do a little hobby hacking back in the late 80's and early 90's i am not sure what the guys are doing these days.. but it all comes down to an understanding of exactly how the OS works for instance. Linux/Unix was one i used to dabble with quite a bit. The easyest way i learned how to get into these box's was pretty simple.. i would subcribe to the programmers news groups. they would talk about security flaws and fixes and you could exploit them. back then i would run a war dialer which is a program that was set up to dial numbers like this say the number was 555- you would enter 0001 to 9999 and it would dial every number in that range loging all computer activity that answered. you could go back later and attempt to get in. I would also use s Dos shell account for my dial up internet access and i could telenet multiple times and by the time i was done you really couldnt tell where i was comming from. These days it is much harder. Most hacking i would imagine look for open wireless access then use that on a secured cleaned computer.. sitting in their cars ect.. this way you cannot be tracked. Reserch guys like Kevin mitnick as well as emanual goldstein. Alt 2600 magazine. Blacklisted magazine ect.. its really rather interesting.

  20. #20
    Join Date
    Mar 2005
    Location
    canada Montreal
    Posts
    418
    hacking is all about math and see the number sequence and understanding the flow of Av flow as well OS implantation.

  21. #21
    Join Date
    Feb 2004
    Location
    Ohio
    Posts
    1,684
    I live in an apartment comlex and pick up plenty of wireless signals. Anyway I can look on their computer to steal some porn?? Just playin, but I do pick up a lot of their music library and have been schemin on that. I wouldn't do anything harmful to their computer even if I knew how, but I'll def double my musci library.

  22. #22
    Join Date
    Oct 2004
    Location
    R these guns registered?!
    Posts
    735
    Quote Originally Posted by DNoMac
    I live in an apartment comlex and pick up plenty of wireless signals. Anyway I can look on their computer to steal some porn?? Just playin, but I do pick up a lot of their music library and have been schemin on that. I wouldn't do anything harmful to their computer even if I knew how, but I'll def double my musci library.
    It seems like you are my neighbor

  23. #23
    Join Date
    Feb 2004
    Location
    Ohio
    Posts
    1,684
    Thanks for the songs Alex. Btw, I like the pics of your gf...

  24. #24
    Join Date
    Oct 2002
    Location
    6'0"/248lbs
    Posts
    6,982
    Ste****g WiFi is a given. IMO - if you broadcast in the open you are allowing people to join your network. If you drop 20 bucks in my driveway - I'll spend it for you If you don't want people to piggy back - lock down your signal.

    If I had wireless network set up I wouldn't care if people joined it, I ain't a scrooge - but the minute it messed up my bandwidth (a noticeable decrease in speed) - fuk them all, I would secure it...

  25. #25
    Join Date
    Jul 2005
    Location
    St. Paul, MN
    Posts
    1,475
    lol, interesting to hear you all add to this post. for the most part...its entertaining. i thought i remember seeing a post saying hackers are good, and crackers are bad. lol....wtf is that all about? hacking and cracking are neither good, nor bad....the intent is where you can apply your accusations.

    umm, read another saying something about all hacking is, is math. well, you would be right, if you weren't wrong.


    hacking is good and bad. depending on how you look at it. "pre-hacking a network" (aka vuln. testing) can be used to prevent a certain attack. most of you have misconceptions about hackers/crackers/scriptkiddies.

  26. #26
    Join Date
    Jan 2006
    Location
    Houston
    Posts
    4,225
    not to be a dick...but if you have to ask...there's no amount of explaining that will help you. 99% of the people who ever claim to have skill are scripty kiddies.

  27. #27
    Quote Originally Posted by zimmy
    99% of the people who ever claim to have skill are scripty kiddies.
    Agreed!

  28. #28
    Join Date
    Jul 2005
    Location
    St. Paul, MN
    Posts
    1,475
    Quote Originally Posted by zimmy
    not to be a dick...but if you have to ask...there's no amount of explaining that will help you. 99% of the people who ever claim to have skill are scripty kiddies.

    so when is the last time you went to a defcon convention? they seemed pretty boastful to me.

  29. #29
    Join Date
    Nov 2005
    Location
    Santa Rosa, CA
    Posts
    486
    One simple way to hack into a password protected website is by using injection SQL. This works on some non-protected websites written in .asp or .aspx and using Microsoft SQL databases.

    They use a statement similar to the following to determine if the username and password are authentic based on values stored in the SQL database:

    SELECT count(*) FROM useraccounts WHERE username = <inputed username> AND password = <inputed password>

    At the username and password prompt you simply type in the password: ' 1 or 1=1' in the password field and any username in the username field and bam your inside the restricted area.

    When you enter in the password of ' 1 or 1=1' the SQL interprets it as follows:

    SELECT count(*) FROM useraccounts WHERE username = anything AND password = 1 or 1=1

    Since 1 always equals 1 this statement will always return true.

    This was a relatively simple security vulnerability that was exploited by many hackers. It allowed people to gain access to restricted sites.

  30. #30
    Join Date
    Jul 2006
    Location
    US, Wisconsin
    Posts
    195
    If you want to learn some hacking, go to http://www.hackthissite.org/ its a very good site..but I dont recommend going around and trying SQL Injections on random pages. Just so you dont try it from the SQL example cmax gave you. It's not the use of programs that make the best hacking, it's the clever and smart thinking of an individual to pick though the holes and flaws and collect information to get what they want. An example would be a good SQL injection hacker could enter information into a field to get a certain error respond back that would allow him to figure out information from that, like figuring out database and field names. and if found, data can easily be edited, deleted, or taken.

  31. #31
    Join Date
    Jun 2005
    Location
    M-I-YaYo
    Posts
    3,915
    i wish my university offered a course in hacking

  32. #32
    Join Date
    Aug 2006
    Location
    USA
    Posts
    286
    Quote Originally Posted by 305GUY
    i wish my university offered a course in hacking
    take a look into EC-Council's Certified Ethical Hacker course/cert...teaches you the thought process and SOME basic hands on attacks and defenses...good course/cert for beginners into the world of security, and again as stated before, social engineering will almost always turn up more results quicker than actually attempting to go after a machine...cleverly amusing, http://www.darkreading.com/document.....svl=column1_1 the usb key way...there are tons of attacks out there, but if you want to learn, start reading...don't ever stop...there's always someone out there better than you
    -garrett

  33. #33
    Join Date
    Dec 2004
    Location
    U.S.A.
    Posts
    7,560
    Network security

  34. #34
    Join Date
    Oct 2004
    Location
    R these guns registered?!
    Posts
    735
    One of the best places to learn hacking is hacking forums. There are few very good ones based in Europe but most of them are not in English (Russian, Dutch etc). They discuss the most recent hacking techniques and sell personal CC numbers and other stuff

  35. #35
    Join Date
    Aug 2006
    Location
    Alright! dont ban me
    Posts
    5
    hacking must be fun

  36. #36
    Join Date
    Jun 2005
    Location
    M-I-YaYo
    Posts
    3,915
    Quote Originally Posted by Microsoft2soft
    hacking must be fun
    plz take me under your wing... i shall be your apprentice... im ready to learn the ways of a hacker

  37. #37
    Join Date
    Jul 2005
    Location
    St. Paul, MN
    Posts
    1,475
    i want to see more.

  38. #38
    Join Date
    Oct 2002
    Location
    6'0"/248lbs
    Posts
    6,982
    Holy sh!t... either Microsoft2soft hacked the arcade or he registered here and took names!

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •