When it comes to hackers, is everyone's image like this
? Yes. You can manipulate other people's mobile phones with just a computer, get the world's top secrets, and let ATMs spit out infinite money... It's really cool. Just ask which programmer has no dream of being a hacker?
This article is to show you what a hacker is, and what abilities do you need to be a hacker?
What is a hacker?
Explained from a computer perspective, hackers are looking for loopholes in websites, systems, software, etc., and using the loopholes to obtain some data or achieve control, causing the other party's program to crash and other effects. Most of the hackers just getting started are engaged in penetration work, and most of the penetration belongs to the direction of web security. So another simple name to call them is - security engineer .
Is it less mysterious all of a sudden?
However, the so-called title is just a code name. I think the real charm of hackers lies in their obsession and love for code, their arrogance in their abilities, and their creativity and courage to break the rules.
Of course not breaking the law.
What skills do you need to be a hacker?
The first point is to understand the way of thinking of hackers
The websites, software, etc. we use in our lives are all composed of code written by programmers. These codes are all based on a positive logic during the design process, in order to achieve a certain purpose, to complete a certain operation process or data transmission logic. The thinking of hackers is reverse, they will analyze the current operation process or data transmission logic, whether there are some risks of imprecise verification or leakage of confidential information, and use them to bypass the normal operation logic to achieve unauthorized Ability to access or operate.
In layman's terms, programmers build houses, while hackers check to see if there is a leak or a gap in the house. Turn it in and do whatever you want; some even directly demolished the house.
Second, learn a programming language
The hacker's weapon is also code. To become a hacker, you must first learn a programming language that hackers need. For beginners who have no coding experience, they can learn from python, PHP or C.
The third point is to learn the basics of network security
As mentioned earlier, hackers are actually security engineers. There are also several categories of security engineers, each with a different learning path. This picture gives a very comprehensive route of hacker learning and development. We can find the corresponding technical learning according to the direction we want to study.
Take web security as an example. First of all, you must have an understanding of Web technology. For example, if you want to crack a website, you must first be able to build a website. So you need to master: Communication protocols, such as TCP, HTTP, operating systems, such as Linux, Windows, service setup: Apache, Nginx, etc., databases : MySQL or Oracle, and programming languages, including front-end and back-end languages. Then, web security technologies also need to be mastered: back-end security such as SQL injection, file upload, Webshell (Trojan horse), etc., front-end security such as XSS cross-site scripting attack, CSRF cross-site request forgery, etc.
There are many basic skills involved in hacking. Most people hold the enthusiasm for three minutes and give up after learning. Therefore, in the learning process, we should first sort out a knowledge map , and then conduct systematic learning.
The fourth point, actual combat operation
If you successfully passed the third point, then congratulations, you are already a junior hacker. Next, it is better to get started and practice, such as SRC vulnerability mining, WIFI network cracking, supporting shooting range exercises and so on. Of course, you can also try to crack your girlfriend's QQ password.
Fifth point, understand the law, understand the law, understand the law!
Article 27 of the "Network Security Law" No individual or organization shall engage in activities that endanger network security such as illegally intruding into other people's networks, interfering with other people's normal network functions, or stealing network data; and protective measures, stealing network data and other programs and tools that endanger network security activities; those who know that others are engaged in activities that endanger network security shall not provide technical support, advertising promotion, payment settlement and other assistance. Article 44: No individual or organization may steal or obtain personal information in other illegal ways, and shall not illegally sell or illegally provide personal information to others.
Article 286 of the "Criminal Law" who, in violation of state regulations, deletes, modifies, adds, or interferes with the functions of the computer information system, causing the computer information system to fail to operate normally, with serious consequences, shall be sentenced to fixed-term imprisonment of not more than five years or criminal detention; Particularly serious cases shall be sentenced to fixed-term imprisonment of not less than five years.
Don't talk about technology, just talk about quality. A "cracker" that maliciously invades the system of other computers and causes damage is very shameful. The Internet is not a place outside the law, and I am not trying to encourage the bad mentality of some friends by popularizing the knowledge of hackers.
I think it is necessary for a technician to understand and learn hacking knowledge, because in this way you can deal with security risks in your daily work and complete programming and operation and maintenance work with a high security awareness; of course, if you can successfully master some hackers Principle and technology, when you encounter an attack, it is not just to guard against death, but to catch the inner ghost and fight against the general.
Technology itself is not evil, it is the misuse of technology that leads to evil!