Resources for the holistic hacker

Help me, Lainon. You're my only hope. The net is vast and infinite. Despite this, I've found there are few resources on how to actually exploit vulnerabilities without using pre-made tools as a crutch for one's lack of knowledge; Metasploit, Meterpreter, MsfVenom etc. It seems all available resources cater towards skiddies more than ever before and sugarcoat the technical reality of computer hacking with the veneer of abstraction, lest your friendly neighbourhood skid be intimidated by the complexities of networking, programming and other concepts inevitably to be found in the world of computing, and gives up on trying to be '7331'. Every blog I've found on the subject claims to explain 'how to hack' but ultimately only tells the reader what pre-written scripts to run while refusing to touch on the underlying concepts behind these tools. I'm a curious cat, lainons, and I despise half-baked explanations, as I'm sure some of you do as well. I'm trying to learn basic offsec and endeavor to build a reverse shell program from scratch to aid my learning in cybersec. I'm learning programming and networking concepts in order to do so, such as port scanning, but I can't seem to find any explanations online on how to actually write an exploit for a publicly known vuln (how to think about writing the shellcode and how to actually program getting that shellcode onto the target machine). Instead all I find is blog after blog on how to be a skid. But I digress. This isn't a blogpost. What I ask is simple; do any lainons here know of any resources; url's or pdf's where I might find explanations on 'how to hack from scratch', without the use of Kali Linux, Meterpreter and Metasploit etc? That explain how to go about programming and writing scripts to exploit vulnerabilities or find your own? Something aimed at the curious hacker. And if so, would you be willing to share them here?

>>19144 - Read Hacking: The Art of Exploitation by Jon Erickson (highly recommended) - Then read https://insecure.org/stf/smashstack.html - Lean a scripting language like Ruby or Python (https://automatetheboringstuff.com/) - Learn x86_64 Assembly. Read Programming from the Ground Up (https://savannah.nongnu.org/projects/pgubook) and read The Art of 64-bit Assembly Language by Randall Hyde (do not get his book "The Art of Assembly Language, 2nd edition"!) There is also Professional Assembly Language by Richard Blum. - Check out MalDev General >>14192 - the Gray Hat Hacking book also has some resources.

>>19145 Not OP, but thanks lainon. I have been looking for something like this. Do you have any opinion on other books like the black hat series of books? Black Hat {Python, Go, Rust}. I know all three of these languages and wanted to know if these books are any good.

>>19146 > Do you have any opinion on other books like the black hat series of books? Sadly, no. I haven't read them. You should check if they actually teach the concepts. If the books just teach the language, you may be better off just downloading the example code, I think.

Depends on what you want to do. Develop tools you can take a look at the blackhat/greyhat series They're all good books ment for hackers, but programmers might find these books lacking or basic. black hat python black hat go black hat ruby etc. If you want to know how to find vulns in software and exploit it. Binary exploitation is a good go. some x86/x64 asm is needed however. Corelan is the defacto starting spot https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/ Next is web, Burb suite has the best free web academy for learning web exploitation. While it didn't use to need a account, nowadays it does for the labs, however it's still a good resource. https://portsperson whose company I enjoy.net/web-security outside of that you need to brushup on that google-fu, things like firmware, hardware, IOT, are really cool but niche fields.

>>19145 Start by installing GNU/Linux and learning a scripting language of your choice. >Hacking: The Art of Exploitation by Jon Erickson (highly recommended) Then read this. After Hacking: The Art of Exploitation, read The Shellcoder's Handbook.

>>19144 Play CTFs. Also, you might enjoy binary exploitation and reverse engineering more than web. https://liveoverflow.com/faq/get-started-with-hacking/ https://github.com/stong/infosec-resources

>>19171 To elaborate: 1. you will learn more and faster by practicing rather than reading books 2. if binary exploitation seems daunting, I can personally vouch for pwn.college and microcorruption.com being a good introduction 3. it's about solving puzzles, challenging yourself and satisfying your curiosity

>>19153 port s wig ger.net

Anyone got a copy of blackhat rust they'd mind sharing here? I'm running low on creds and would rather not have the order form for the pdf on my permanent record.

>>19230 A lainon posted in the malware general thread here, >>>19232

>>19145 >>19155 Do you need to know the C programming language before tackling Hacking: The Art of Exploitation? If so, to what extent do you need to know it?

>>19402 >Do you need to know the C programming language before tackling Hacking: The Art of Exploitation? No. The first chapter quickly teaches you the basics of C. >If so, to what extent do you need to know it? You need to know pointers and what malloc does (as I said, Hacking: The Art of Exploitation will teach it). But if you need a book about C, refer to C Programming: A Modern Approach (http://knking.com/books/c2/).

Learn computer science, and security. Then if you are naturally inclined to think of ways to break a system, and truly understand the content, you will be 1337. There are some hacking textbooks, but you need to know your non-hacking stuff as well. Learn to program, learn to be a good sysadmin, and you will eventually realize what to watch out for.

>>19404 How well and in-depth does this book teach you about C?

>>19414 >>19404 Sorry, by "this book" I meant Hacking: The art of exploitation. Also, as a follow up question, is C Programming: A Modern Approach newbie friendly? I was thinking about checking out The C Programming Language by Brian W Kernighan and Dennis Ritchie, but many have warned that it isnt newbie friendly.

>>19414 >>19415 >Hacking: The art of exploitation. It teaches you the very basics of C quickly, so you can follow the book. The book also teaches you the basics of sockets and crypto. Hacking: The art of exploitation doesn't teach you enough C to become a C programmer but the info in the book is very valuable for any programmer. >The C Programming Language by Brian W Kernighan and Dennis Ritchie That book is written for programmers and it's also outdated. It's still a classic but you need to update your knowledge of C by reading another book like C Programming: A Modern Approach. But you don't have to read K&R to understand C Programming: A Modern Approach.

>>19416 Thank you for the feedback! One last question, besides HTAOE and some of the other books mentioned in this thread, what are some other fantastic books on hacking?

Got a couple of DN resources, Tor required obviously Guide to general hacking http://ytxmrc3pcbv5464e.onion/showthread.php?tid=178 cybersecurity resources http://ytxmrc3pcbv5464e.onion/files/Infosec/All_Files_Dir/

>>19506 Neither site works, all I got was "The provided onionsite address is invalid. Please check that you entered it correctly."

>>19506 nae working sadly

>>19506 >>19535 >>19552 Both addresses are deprecated v2 onions.