|
How can I become a professional hacker? |
|
|
|
|
Wednesday, 01 November 2006 |
|
The key is to have fun at your job, then you will be successful. If this is fun for you, consider a career in it. I'll warn you though. After ten years or so, the "magic" of hacking could wear off, and you'll lose a hobby. It just becomes a job after a while. I tried my whole life to become "elite" and a "famous hacker", and now that I'm "there" I find it a little bit unfullfilling. Sure, it's cool seeing people's faces when I break out a war story or two, but in all seriousness, if you do this professionally, it will become a job, not a hobby. Just be warned.
If you are serious, I first encourage you to become a power user on at least two operating systems, like Windows and Linux. Learn how to install the OS, from scratch. Learn how to safely use the Windows registry. Learn how to change passwords and set permissions on files and directories. Learn how to network machines together. Learn how to transfer files back and forth. Understand how to start, stop and use various network services like FTP, SSH, Web. Learn how to do normal things like edit text documents, view PDF files, install software (harder on UNIX and Linux than Windows), compile and run code on UNIX (c programs, perl), learn to cut and paste text between windows. Learn to work from the command line to change directories, list files, manipulate files. Learn to search the web for answers to your questions. Read the friggin' manual before posting to a forum.
Once you can handle all the "normal" stuff adeptly on both platforms, you're probably ready for the next step. This means you should be able to create your own network out of spare (or VMWare) boxes of various OS's and versions (older are easier to hack, generally), start network services, and practice attacking your own machines. This will probably require you to use a tool like nmap and nessus against your own machines, and surf the Internet looking for tools (exploits) to break into your machines using the holes found with Nessus. If you get sick of learning at any point during this process, give up. Seriously. Professional hacking requires constant learning to stay on top of the tech. If you fall victim to the inevitable desire to hack a server that doesn't belong to you, and without permission, give up. You'll get arrested eventually, and your trust will suffer an almost certain deadly blow. If you're not in the game to be one of the good guys, give up. Your ultimate goal should be to protect your clients. If you have other goals, (like making money at any cost, riding the thrill wave of illegal breaking and entering) you're on the path to becoming a criminal, not a professional. Finally, and most importantly, be willing to share what you know, as this will create a network of people to help when it's your turn to ask the questions. Always remember that you were once an amateur in need of direction. Provide that direction, tempered with common sense and a healthy dose of ethics. Don't help criminals. You'll know if someone's up to no good.
Once you've done all of this, you're well on your way. You'll still need to take more steps to break into the field, so consider a book like InfoSec Career Hacking : Sell Your Skillz, Not Your Soul. (Sorry for the shameless plug =)
|