Hacking 101 with Sandro

hacking_101_with_sandro.md

hacking 101

a couple different thought threads...

Concepts to learn first

http

ports

protocols

programming

data structures and persistence

browsers/CLIs

TCP and packets

TBD

apps and tools

linux

docker

burp suite

• https://www.hackingarticles.in/beginners-guide-burpsuite-payloads-part-1/

TBD

Vulnerable apps

OWASP Juice Shop - https://owasp.org/www-project-juice-shop/

• installation: https://hub.docker.com/r/bkimminich/juice-shop

DVWA - Damn Vulnerable Web App - http://www.dvwa.co.uk/

• use this docker image: https://hub.docker.com/r/vulnerables/web-dvwa

bWapp - (Buggy Web App) - http://www.itsecgames.com/

• use this docker image: https://hub.docker.com/r/feltsecure/owasp-bwapp/

nMap's scanme - test nMap on this - http://scanme.nmap.org

Altoro Mutual - http://www.altoromutual.com:8080/

Fuzzgoat - written in C - https://github.com/fuzzstati0n/fuzzgoat