How to make career in Hacking/Pentesting Field

Career in Pentesting Field

To become a successfull hacker if you are totally new/beginner then here is my guidance for you.

It took more than 3 years and you can say there is no time limit to become a successfull hacker because everytime we learn new things and everysecond new hacker discover new stuffs.

If you ask pentester then they will tell you to start with learning coding.

Yes because coding is the key to success.

I heard this from a hacker :->

"try to write your own code, rather than using someone else's code and exploits.This will help you to gain whatever you want and before doing things, know every stuffs and how those things work.Hacking is all about Knowledge and skills"

<=== So start from scratch ===>

You should familiar with programming language.
For Starting -> 
1. Learn Fundamental of Programming Language from Lynda

•                  Youtube Channel

2. Then move to Python Language as your first language [1.Automate The Boring Stuff With Python great resource & 2.Python for Pentesters & then 3. Black Hat Python] 

•                 1. Download Here
•                 2. Download Here  
•                 3. Download Here

3. Understand basics of C/C++ language.
     [Again use torrent]

4. Be familiar with Bash Scripting Language

1.      Download Here

5. Web Programming Language -> html,css,js,php,mysql

1. Start with codecademy

Please use torrent to find udemy course related to learn web programming language.

====================================
Now start with Linux

1. LINUX UTILITIES COOKBOOK

2. Linux Bible 9th Ed (2015)
====================================
Then Kali linux  Books  :->
1. pwk.1.0 [google it]
2. Kali Linux Cookbook
3. Kali Linux Web Penetration Testing Cookbook [Latest]

I specially like pwk ebook

====================================

To familiar with commands for both Windows & Linux please read this ebook :->

RTFM [Red Team Field Manual ]

====================================

Now read these following ebooks to start your journey in hacking :->

1. ethical hacking and penetration testing guide
2. Mastering Wireshark - Charit Mishra 
3. the-web-application-hackers-handbook

4. The Hacker Playbook 2 Practical Guide To Penetration Testing

====================================

Friends to learn Linux with practical you should use virtualbox or vmware which is virtual machine and you can use many Operating System in this machine.

Please don't think to use Linux as main OS for starting.

Use Window OS as main O and then use Linux under Window using Virtual Machine.

For starting Use Ubuntu to learn Basics of linux using those ebooks which i mentioned above.

And Either Kali or Backbox or Parrot OS as your attacker Machine in Virtual Machine.

===================================

Friends i am not telling you here to make your pentesting lab because when you read those ebooks then you already learn to make your own Pentesting Lab

===================================

Best Tools for Pentester :->

1. Burpsuite 
2. Owasp Zap
3. Nikto
4. Nmap 
5. Seclists as Fuzzdb
6. Webscarab
7. recon-ng
8. Netcat
9. Dirbuster

Mostly pentester use above tools.

And you should mostly relies on your Brain not on tools but you must use above tools which really help pentesters.

In my this blog i will make tutorials on using those tools like using NMAP ,NetCat, Burpsuite etc

===================================
Some awesome Youtube Channel Collection :->
(I will add time to time)
1. SSTec Tutorial 
2. aakash choudhary 
3. Pentesting With Spirit 
4. Penetration Testing in Linux  [highely Suggested]
5. Amir Muzaffar
6.webpwnized [Highely Suggested] 

===================================

Hello friends i also want to say that if you are reading ebooks and want to also learn practically then start with war game because it also make your knowledgee increase

Here is link :->

overthewire.org/wargames/ 

Also friends stay tune with vulnhub.com
as this provide many vulnerable machine to practice.
When you stuck in practicing then see Walkthrough either in google or youtube or in vulnhub.com

===================================

For Bug hunting :->

1.https://forum.bugcrowd.com/t/researcher-resources-tutorials/370 

2. h1.nobbd.de 

In last i want to say just PRACTICE PRACTICE PRACTICE PRACTICE & JUST PRACTICE

Thanks for reading. Stay tune with my blog

THANKS
regards : CodeNinja a.k.a. Aakash Choudhary