Website hacking topics, to answer!

[nizzel]

Hi guys, so ive learnt the basics of javascript and HTML.
I want to be a website hacker, but i got a problem.

The problem is that i dont know what i need to know about internet, ports and those things that i dont know what they are... i know that probably are a lot of topics like this one explaining what we need to know, but i couldnt find any (its pretty hard to find something when we dont know what we are lookin for).

So guys i just need you to give me the topics, i dont need you to explain if you dont want to. Just want to know what i do need to know!


Thank you so much guys.


by nizzel!

[blindfuzzy]

Web app vulnerabilities
XSS
SQLi

I could go on forever....

[white-knight]

You can try to learn more by doing some reading there are alot of books on the subject here is one that is pretty good 

http://www.amazon.com/The-Web-Application-Hackers-Handbook/dp/1118026470

If you want to learn more by hands-on here are some free sites to practice..

http://securityoverride.org/
http://www.hackthissite.org/
http://overthewire.org/wargames/
https://hack.me/
https://pentesterlab.com/
https://www.hackthis.co.uk/
https://ctf365.com/

The list goes on.

[0pt1musPr1m3]

As white-knight has already suggested - For beginners I highly suggest picking up the book "The Web Application Hackers Handbook". If you are serious about learning buy the paperback version so you can make notes, highlight shit, whatever... Its just easier than a pdf.

Read some of it and you will have a much better idea of whats going on and will have much better questions to ask. 

[Greasabilly]

"The Web Application Hackers Handbook".

Great book and worth the read. OWASP would also be a good resource to check out.

[Kulverstukas]

Great book and worth the read. OWASP would also be a good resource to check out.

What do you know, we have them all in our index... https://evilzone.org/wiki//index.php/The_big_ebook_index

[deed]

All you need my friend, is TCP/IP knowledge. There's a long guide that is 1.6k pages long, but it is a true A to Z guide. If you're willing to learn about networking then read it.

The TCP/IP guide from M.kozierok

[th3g00n]

The following discuss how web applications work in general and focuses more on client-side security vulnerabilities. You probably want to start with the first one.

http://www.amazon.com/The-Tangled-Web-Securing-Applications/dp/1593273886
http://www.amazon.com/Browser-Hackers-Handbook-Wade-Alcorn/dp/1118662091

[Greasabilly]

Browser Hackers Handbook: upload.evilzone.org/download.php?id=9311612&type=rar

Web Application Hackers Handbook: upload.evilzone.org/download.php?id=5533641&type=rar

Tangled Web: upload.evilzone.org/download.php?id=9541473&type=rar

Huh what do ya know, all from EZ