hackingteam.it - How is this legal/allowed?

[vezzy]

Oh no, I'm not saying there's a lack of intelligence. But one thing's for sure, we've been pretty stagnant as of recent.

[lucid]

Can't argue with that I suppose.

[ande]

I am not quite sure I know what you guys mean. Looking at the forum statistics, we are doing just as fine as we have done for a long time. Not that I am as active as I once was, so maybe I don't have the full picture but nonetheless.

[lucid]

Well, at least in my opinion, there could be more new topics on things that have to do with hacking(go figure). I realize that we must keep things theoretical as well as not wanting to spoon feed newbs by giving away too much information, but it seems like talking about hacking at all is taboo in a way...

Which is weird considering this is a hacking forum.

Honestly though, Sir explained my thoughts with far greater writing prowess and elegance in a large post he made quite awhile ago. I know you read it ande and I'd be willing to bet that you know which one I'm talking about.

I can't speak for how vezzy feels. But please, don't take this the wrong way ande I'm not bashing EZ or it's other staff and members, or you.

[ande]

I know what you mean. I am hoping to touch on some of that with a new category/board structure in Alpha as well as a archive much like the one we had way way way back. tools.evilzone.org or archive.evilzone.org or some shit. A little bit like VX heaven or what that archive was called. I realize hosting and showing old malware code and all sorts of stuff is kinda important. With that said, we can never (I wont) go back to the old defacement/showoff bullshit. Nor is it a good idea for us to let people post actual URL's with targets they want help with. But we'll see.

[lucid]

With that said, we can never (I wont) go back to the old defacement/showoff bullshit. Nor is it a good idea for us to let people post actual URL's with targets they want help with. But we'll see.

Of course not, I understand that. I also keep forgetting that EZ Alpha is coming out and there will be many changes. I guess I just need to be patient.

[Alin]

I am not quite sure I know what you guys mean. Looking at the forum statistics, we are doing just as fine as we have done for a long time. Not that I am as active as I once was, so maybe I don't have the full picture but nonetheless.

Well certainly statistics don't reveal much other than the site is being visited and that some people are posting. It does not reveal the fact that in general the discussions are based on basic knowledge to the general infosec guy and the level is quite low and uninteresting. I get the idea that as a forum it is important to be welcoming, but when most of the new people are here to learn about python and don't get the idea of pointers in C something is wrong as a "hacking community".

[Phage]

Hacking is not only about pointers in C! And you can definitely be a successful pen tester/security consultant without knowing any C. I think you need to look at the broader picture and realize that there are many fields of hacking and many directions that doesn't require you to know C.

[vezzy]

Generally if you intend on finding vulnerabilities in most large-scale software, which is primarily C/++, then yes. You do need to know C in and out, as well as low-level machine concepts and processor architectures.

[Alin]

Hacking is not only about pointers in C! And you can definitely be a successful pen tester/security consultant without knowing any C. I think you need to look at the broader picture and realize that there are many fields of hacking and many directions that doesn't require you to know C.

You can clearly see from my post that I was just making examples e.g. python or C. If you don't know either, you are not gonna make it as a successful pen tester in a technical environment. I might be stepping on some people here, but it's damn correct and I know a lot of people claiming to be pen testers.


I guess there is a reason why there are no discussions on security frameworks like ITIL, Sarbanes Oxley or any ISO standard, and that's because they are only compliance and not technical at all. Yes you can be a great security consultant knowing these frameworks and compliance rules, but they are not part of the technical discussion that are/should be happening in here. I'm not saying they should be disregarded as potential topics I'm just saying the categories available implies this being technical forum and lately the technical level have been low.

[Phage]

1. This has gone extremely off-topic.


2. Vezzy; Who said pen testing is only about vulnerabilities in large scaled software?

Alin; Exactly, claiming! A lot of people are claiming to be pen testers just because they have found a vuln or two on a website. And you can do just fine without Python and C. I know a really successful Pen tester and he uses Perl instead of Python and he's not particular good at C. He's a web app/network pen tester. It's not all about which languages you know etc. It's about how you apply your knowledge to the job.

[Alin]

[size=78%]Alin; Exactly, claiming! A lot of people are claiming to be pen testers just because they have found a vuln or two on a website. And you can do just fine without Python and C. I know a really successful Pen tester and he uses Perl instead of Python and he's not particular good at C. He's a web app/network pen tester. It's not all about which languages you know etc. It's about how you apply your knowledge to the job.[/size]

1. I agree this is out of topic.


Again you go with the specifics of my examples. If you want you can replace Python with either Haskell, Perl or Ruby. The point I'm stressing is that lot of the people who come in here know none of the languages or have only written simple hello world in one of them. The guy you mention might prefer Perl, but he's still fitting in the box as a pen tester who knows technicality and that is what I'm trying to say.

[proxx]

Yeah just close this baby down , it has been coming back since forever.