Getting Started with Hacking

What is hacking..?

Hacking is gaining the authority to access data by intruding without permission into someone else's computer system.

Hacking is a different concept from cracking. Simply put, hacking is "hacking to see the source code" and cracking is "hacking to destroy that source code."

That's why we who learn hacking must keep well within the line of the law.

Types of hacking

Technical hacking

• Deep understanding of the target system and technology
• High cost, but can carry out stealthy attacks.

Social engineering hacking

• An attack that exploits vulnerabilities between people to obtain the desired information
• Easy to pull off and many people fall for it. But it's a conspicuous attack

I actually think everyone has already tried social engineering hacking.

Categories of hacking

War

• War between nations

Money and honor

• Bug bounty
• CTF
• Vulnerability trading

Career

• Penetration testing, security consulting, R&D

Hobby

• Program analysis

The relationship between development and hacking

In theory, when new technology is developed, new loopholes inevitably arise too.

To do more trendy hacking, you need to read new development trends.

Understanding development is the very depth of hacking.

How to study for CTFs

• pwnable: study stack techniques like RTL and ROP and heap techniques, and apply them to each problem
• web: study attack techniques like XSS and SQLi and apply them to each problem
• crypto: being good at math problems (math skill) helps a lot
• reversing: no particular technique is needed, so just learn the new approach when studying

---

Original (Korean): tistory — published 2021-07-10, migrated to this blog. This translation was generated with the help of AI.