(untitled)

I'm looking to change hats. Any tips or like-minded forums / IRC channels?

Just buy a new hat then?

>>5578 wew lad you best be joshin or maybe I got the wrong idea of /sec/

>>5579 I was, change from what to what?

>>5580 going black or gray

>>5581 Which area are you interested in?

>>5582 I like knowing how things work--especially when I shouldn't. This includes people and computers. I'm extremely cautious with attacks. Some may see this as a flaw but the last thing you want is a target to harden their equipment after you fail a half-assed attack.

cryptojacking is the new way to make money. the most common way its done, from what i read is looking up how to set up a js miner or regular miner, shodan + exploitdb some soykafty outdated servers. repeat. good luck in jail.

>>5583 having the discipline/motivation to keep learning is probably the most important thing. I'd probably grind through some books like: web application hackers handbook, hacking art of exploitation, blackhat python, malware analysts cookbook, penetration testing hands on introduction. You can do some vulnhub stuff like this: https://github.com/ferreirasc/oscp https://www.abatchy.com/2017/02/oscp-like-vulnhub-vms but web stuff is where it's at, wait for this to be on libgen: https://leanpub.com/web-hacking-101 All the retarded sec people on twitter is a good source of news and you should read theirs and others writeups.

>>5585 When you're done and you can farm bounties then you can go full black

>>5585 Thanks for the direction. >>5586 Of course I don't plan on being caught, but if I am, is searching for an exploit against a company that has a bounty program a valid legal excuse? Implying I were to present them with it

>>5587 It's better than nothing but it depends on company and country. Just submit to companies what can't be used and keep what can be used. Having an "active" bounty profile could come in handy and you'll make a quick buck. Having a good opsec routine is also necessary.

Two sentences is not a good way to start a thread. As an aside, the notion of different colors of hats for referring to something nuanced like this is one I find stupid. Lastly, you should be using an already-existing thread to ask a basic question like this and you shouldn't ask for advice regarding potentially illegal behavior. To quote the sticky: >Do remember to be smart when discussing potentially illegal activities. You don't seem to have read the sticky. This thread is locked.