Jump to content

Is Ethical Hacking good?

Meet8939
Go to solution Solved by LividPanda,

Ignore them. I work in the infosec field as a penetration tester, which is what the job is called and is being incorrectly identified as a security analyst. Generally a security analyst and a penetration tester will have wildly different responsibilities. You should stick with it (hacking) because it is in super high demand and pays very well, it is also incredibly challenging and interesting. The quickest way into the penetration testing field is by getting a certification called the Offensive Security Certified Professional. It is technically an introductory level certification but penetration testing is not a introductory level field. The OSCP is a grueling 24 hour long hands-on only exam. It is best to start out as a system administrator or help desk, move to a Jr Security Analyst position, then a Security Engineer position, and then finally Penetration Tester. A good place to get some experience for free is https://www.hackthebox.eu/ which has a network you VPN into with machines to hack very similar to the OSCP.

OSCP.jpg

Hey. I was trying to learn ethical hacking from youtube recently, but whenever someone knows I am learning to hack they freak out and just start telling me why it's not good and why shouldn't I learn it. I am really interested in computers, how it works and what else I can do with it. I am really interested in it but they just tell me not to do it. They just say it is dangerous but in my response I am not trying to hack some organization or anyone else I am just learning it as an interest that I have. 

So it bad or harmful to learn this, I am confused. can it do any harm to me or my family if I do so? 

I am learning it through Kali Linux interface and I had listened from a lot of people that it is more secure than any other out there including Windows OS so what should i do?

Link to comment
Share on other sites

Link to post
Share on other sites

people usually don't see the difference between white hat, grey hat and black hat hackers, you are learning to be a white hat currently(someone that hacks with permission and to gain money) which basically is digital security.

May the light have your back and your ISO low.

Link to comment
Share on other sites

Link to post
Share on other sites

Don't expect your grandmother to know the difference between white and black hats. They just have heard from the news that hacking is a scary and bad word, and that is what they go off on. You could say that instead of learning hacking, you are learning to be a cyber security specialist.

Link to comment
Share on other sites

Link to post
Share on other sites

Don't refer to it as hacking. The industry doesn't use that term either, it will be something like system security analyst. It's basically the same thing, but doesn't have the misunderstanding or stigma that "hacker" does. 

 

If you'er interested in testing system security as a profession, you'll want to learn about system security, encryption and low level operating system design to get a proper understand of how it works and where the vulnerabilities lie. If you try to jump into learning to "hack", you'll find you're just copying commands that someone else has come up with and you won't understand how or why something can be exploited and how it can be fixed. 

 

EDIT: As for whether ehtical hacking/white hat hacking is good. It's an essential part of the development process for pretty much all computer systems. If there's no security testing on say, a new banking platform, then potential security exploits which could result in unauthorised access to accounts could be in the released product. 

 

EDIT2: As for whether it can do any harm. That really depends on what you're using it for. The difference between black and white hat isn't the methods, it's how it's used. A white hat hacker's job is to basically act as a black hat hacker, but under a controlled, legal and pre-agreed environment for an employer. 

 

Grey hat hackers are generally black hat hackers, typically with a moral message or otherwise trying to do something they consider good. In the eyes of the law, they'll generally be considered black hats though. 

Link to comment
Share on other sites

Link to post
Share on other sites

Just to clarify, are we talking about professional security, or grey hat hacking?

 

If we're talking grey hat, then I'd gladly share my opinion about it

Case: Corsair Graphite 760T || PSU: Corsair RM650i || Mobo: Asus RoG Strix Z270E || CPU: Intel i5-7600K @4.8GHz || Cooler: Corsair H110i v2 || RAM: Corsair Vengeance DDR4 3200MHz 16GB White LED || GPU: MSI GTX 1070 8GB GAMING X || SSD: Samsung 850 Evo 250GB, Samsung 860 Evo 500GB, Samsung MZ1280 M.2 128GB || HDD: Seagate Barracuda 1TB

Link to comment
Share on other sites

Link to post
Share on other sites

I wouldn’t call it ‘ethical hacking’. That’s a more popularised term used by the mainstream that are not really familiar with the principles of ‘hacking’.

They want to bundle all “hacking” together although there are obvious differences.

Link to comment
Share on other sites

Link to post
Share on other sites

5 hours ago, Meet8939 said:

Hey. I was trying to learn ethical hacking from youtube recently, but whenever someone knows I am learning to hack they freak out and just start telling me why it's not good and why shouldn't I learn it. I am really interested in computers, how it works and what else I can do with it. I am really interested in it but they just tell me not to do it. They just say it is dangerous but in my response I am not trying to hack some organization or anyone else I am just learning it as an interest that I have. 

So it bad or harmful to learn this, I am confused. can it do any harm to me or my family if I do so? 

I am learning it through Kali Linux interface and I had listened from a lot of people that it is more secure than any other out there including Windows OS so what should i do?

Sounds like you need find some classes that fall under security analyst/pen-tester.

 

Like Oshino stated, if you don't understand the fundamentals, you basically are just copy/pasting code without knowing what you are really doing.  Plus, to get in that career field (security analyst), you need to really know the ends and out of securing a system and breaking into it (like no joke, I know quite a few in my Guard unit going for that career field and the study material is nuts).

2023 BOINC Pentathlon Event

F@H & BOINC Installation on Linux Guide

My CPU Army: 5800X, E5-2670V3, 1950X, 5960X J Batch, 10750H *lappy

My GPU Army:3080Ti, 960 FTW @ 1551MHz, RTX 2070 Max-Q *lappy

My Console Brigade: Gamecube, Wii, Wii U, Switch, PS2 Fatty, Xbox One S, Xbox One X

My Tablet Squad: iPad Air 5th Gen, Samsung Tab S, Nexus 7 (1st gen)

3D Printer Unit: Prusa MK3S, Prusa Mini, EPAX E10

VR Headset: Quest 2

 

Hardware lost to Kevdog's Law of Folding

OG Titan, 5960X, ThermalTake BlackWidow 850 Watt PSU

Link to comment
Share on other sites

Link to post
Share on other sites

What you're referring to sounds more like cyber security. It's a good thing to learn so you know how to protect yourself.

 

DbWolWRW4AIXoJB.jpg.98812cdb2ee38281381dd34baf53518a.jpg

Link to comment
Share on other sites

Link to post
Share on other sites

12 hours ago, Meet8939 said:

Hey. I was trying to learn ethical hacking from youtube recently, but whenever someone knows I am learning to hack they freak out and just start telling me why it's not good and why shouldn't I learn it. I am really interested in computers, how it works and what else I can do with it. I am really interested in it but they just tell me not to do it. They just say it is dangerous but in my response I am not trying to hack some organization or anyone else I am just learning it as an interest that I have. 

So it bad or harmful to learn this, I am confused. can it do any harm to me or my family if I do so? 

I am learning it through Kali Linux interface and I had listened from a lot of people that it is more secure than any other out there including Windows OS so what should i do?

Hacking period is not good. 

Michael Summers

CaseObsidian 900D  MOBORampage IV Extreme CPU:  i7-4960X Ivy Bridge-E 3.6GHz  RAM:: Vengeance Pro 32GB  Boot : RAID 0  840 Pro  512GB  Data:  RAID 10 WD Red  2TB PS: Corsair : AX1200 GPU:  ASUS  GTX-780 Ti

Birthday Gift from my wife - She made me order it and built it :-)

Link to comment
Share on other sites

Link to post
Share on other sites

9 minutes ago, Gofer01 said:

Hacking period is not good. 

Where's my downvote button?

 

Hacking as defined is hijacked by a negative connotation. Other terms are used instead by professionals in the field to avoid that connotation but it's the same thing.

 

[Out-of-date] Want to learn how to make your own custom Windows 10 image?

 

Desktop: AMD R9 3900X | ASUS ROG Strix X570-F | Radeon RX 5700 XT | EVGA GTX 1080 SC | 32GB Trident Z Neo 3600MHz | 1TB 970 EVO | 256GB 840 EVO | 960GB Corsair Force LE | EVGA G2 850W | Phanteks P400S

Laptop: Intel M-5Y10c | Intel HD Graphics | 8GB RAM | 250GB Micron SSD | Asus UX305FA

Server 01: Intel Xeon D 1541 | ASRock Rack D1541D4I-2L2T | 32GB Hynix ECC DDR4 | 4x8TB Western Digital HDDs | 32TB Raw 16TB Usable

Server 02: Intel i7 7700K | Gigabye Z170N Gaming5 | 16GB Trident Z 3200MHz

Link to comment
Share on other sites

Link to post
Share on other sites

18 minutes ago, Gofer01 said:

Hacking period is not good. 

 

What is your definition of "hacking"?

 

2 minutes ago, 2FA said:

Where's my downvote button?

 

xD

Link to comment
Share on other sites

Link to post
Share on other sites

15 minutes ago, Gofer01 said:

Hacking period is not good. 

If you think that clearly you're new to the world of tech. While the word does have a negative connotation in popular culture, ethical hacking is not only good, it's necessary to prevent security breaches. The only way to find flaws is to exploit them. Hacking is a two-faced coin- the bad kind that as in attempting nefarious deeds, and the good kind as in trying to stop the bad kind.

 

I sometimes think this forum needs a downvote button...

it's time

 

Link to comment
Share on other sites

Link to post
Share on other sites

 

This is why people get paid to be 'hackers'. What he did happens second by second and literally cost nothing. 100% guarantee you that he could have made $$$$$$ doing that. 

 

So, while people worry about you using Metasploit inside of something like Kali Linux or BlackArch... the real bad guys will keep stealing. The point of all of that is to educate people on how easy it is to do and how much damage can be done. Most hackers aren't out to steal credit cards or read your email. In fact, most want to prevent that. Some do it professionally for their company (White hat), some do it for a 3rd party to prevent really bad ones from finding something first (Grey hat), and some are just criminal assholes (black hat). 

 

Regardless, they all do the same thing and use the same processes. In the end, someone has to do it - or we'd all be getting wrecked by criminals. 

Link to comment
Share on other sites

Link to post
Share on other sites

Ignore them. I work in the infosec field as a penetration tester, which is what the job is called and is being incorrectly identified as a security analyst. Generally a security analyst and a penetration tester will have wildly different responsibilities. You should stick with it (hacking) because it is in super high demand and pays very well, it is also incredibly challenging and interesting. The quickest way into the penetration testing field is by getting a certification called the Offensive Security Certified Professional. It is technically an introductory level certification but penetration testing is not a introductory level field. The OSCP is a grueling 24 hour long hands-on only exam. It is best to start out as a system administrator or help desk, move to a Jr Security Analyst position, then a Security Engineer position, and then finally Penetration Tester. A good place to get some experience for free is https://www.hackthebox.eu/ which has a network you VPN into with machines to hack very similar to the OSCP.

OSCP.jpg

Link to comment
Share on other sites

Link to post
Share on other sites

Lol I went to that course website and looked at and then filled out that form. Basic security 101. It asked for my middle name and wouldn't proceed until I gave it. So I didn't fill out the form

Michael Summers

CaseObsidian 900D  MOBORampage IV Extreme CPU:  i7-4960X Ivy Bridge-E 3.6GHz  RAM:: Vengeance Pro 32GB  Boot : RAID 0  840 Pro  512GB  Data:  RAID 10 WD Red  2TB PS: Corsair : AX1200 GPU:  ASUS  GTX-780 Ti

Birthday Gift from my wife - She made me order it and built it :-)

Link to comment
Share on other sites

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×