# What Is Ethical Hacking | How To Be An Ethical Hacker | Noob Guide! **URL:** \ **Category:** Tutorials & Methods\ **Tags:** hacking, tips-tricks\ **Created:** [May 7, 2020, 3:03pm UTC](https://onehack.st/t/what-is-ethical-hacking-how-to-be-an-ethical-hacker-noob-guide/85089 "2020-05-07T15:03:53Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![Aina](https://onehack.st/user_avatar/onehack.st/aina/32/167469_2.png) [@Aina](https://onehack.st/u/Aina)\ **Post date:** [May 7, 2020, 3:03pm UTC](https://onehack.st/t/what-is-ethical-hacking-how-to-be-an-ethical-hacker-noob-guide/85089/1 "2020-05-07T15:03:54Z")
Hacking is the process of discovering vulnerabilities in a system and using these found vulnerabilities by gaining unauthorized access into the system to perform malicious activities such as deleting system files or stealing sensitive information. It is illegal in terms of unauthorized access, fraud and theft of service. While Ethical hacking is a legitimate simulated cyber-attack against your computer system to check for exploitable vulnerabilities such as unprotected inputs that are susceptible to code injection attacks and attempted breach of number of application systems, i.e. application protocol interfaces (APIs) or front-end/backend servers. # **Who performs Ethical Hacking?** It is preferable to have an individual that performed ethical hacking with no prior knowledge of how the system is secure because they may be able to expose blind spots missed by the developers who built the system. Outside contractors are usually brought in to perform the tests. These contractors are referred to as ‘ethical hackers’ since they are being hired to hack into a system with permission and for the purpose of increasing security. Many ethical hackers are experienced developers with advanced degrees and a certification for penetration testing. On the other hand, some of the best ethical hackers are self-taught. In fact, some are reformed cybercriminal hackers who now use their skills to help fix security flaws rather than exploit them. The best candidate to perform ethical hacking can vary greatly depending on the target company and what type of test they want to initiate and after conducting that test they are able to answer: 1. Exactly what vulnerability an attacker can exploit 2. What kind of information or system is a hacker’s region of interest 3. After exploiting, what can the attacker do with that 4. How many of people can see the attempted breach 5. How to mitigate that vulnerability ## **Types of Hackers** There are mainly three types of hackers which includes: ![image](https://onehack.st/uploads/default/original/3X/f/f/ff3bc23ed3ecac3caa0c3bcc2259883cee2d24ee.jpeg) ### **Black Hat Hacker** Black hat hackers are non-ethical hackers perform malicious attacks for their own selfish intentions. ### **Grey Hat Hacker** Grey hat hackers possess both capabilities of white/black hat hackers. They break ethical principles but without malicious intent. They don’t care about stealing sensitive information but to find loopholes and vulnerabilities in a system to notify the administrator or the owner that their system contains one or more vulnerabilities that must be fixed immediately ### **White Hat Hacker** White hat hackers are Ethical hackers having full rights to perform cyber-attacks and locate vulnerabilities. ## **Types of Hacking** Hacking can be of several types depending upon the damage it can create and what type of target an attacker would try to exploit. Most commonly would be system hacking, web server hacking, web application hacking, hacking wireless networks and social engineering (Phishing, tailgating, whaling attack) ## **Five Phases of Ethical Hacking** The five phases of ethical hacking includes: ![image](https://onehack.st/uploads/default/original/3X/a/e/aecadf5c403da5f2afe10c4071c2b08b58c92833.png) ### **Planning and Reconnaissance** The first stage in performing ethical hacking is to define the scope and goals of a test, including the systems to be addressed and the testing methods to be used and then Gathering intelligence, i.e. network, mail server and DNS to better understand its possible vulnerabilities and how a target works. ### **Scanning** The next step involves performing scanning in which a tester can learn how a target reacts to various intrusion attacks. This can be done either conducting: 1. Static Analysis (examining an application’s code to observing the way it behaves while running) 2. Dynamic Analysis (examining an application’s code in a running state, as providing a real-time view into an application’s performance) ### **Gaining Access** This is a critical step where web application attacks have been used such as SQL Injection, Cross-site Scripting and backdoors to discover target’s vulnerabilities and then exploit them by stealing information and interfering privileges and observe the amount of damage it can cause ### **Maintaining Access** In this step of testing, the found vulnerability is used as a persistent presence in the exploit system for a long duration having objective to steal sensitive information or to spread malicious code inside the network, quickly gaining access to the server. ### **Analysis and WAF Configuration** The final step is to compile the result by analyzing and documenting about the vulnerabilities exploited, access to the data, and the amount of time that the tester can remain unnoticed in the system. ## **How to become a Hacker** To be an ethical hacker or a penetration tester the very first thing you need is to have a willingness to learn new things, after that the most fundamental need is to having knowledge of at least one scripting language as well as some basic knowledge of Network and Web Security. This can be achieved by getting hands on training provided by EC-Council. EC-Council’s Vulnerability Assessment and Penetration Testing (VAPT) course summarizes various independent certification programs in order to deliver outstanding training and learning. The VAPT course structure is as follows: ![image](https://onehack.st/uploads/default/original/3X/4/1/416acc9d777518804aaabfd11ade99f828e7d51e.png) The three core certifications of this course includes: 1. Certified Network Defender 2. Certified Ethical Hacker 3. Certified Ethical Hacker (Practical) At the advance level this course includes: 1. Certified Threat Intelligence Analyst 2. EC-Council Certified Security Analyst 3. EC-Council Certified Security Analyst (Practical) At expert level: 1. Licensed Penetration Tester (Master) ## Top Hacking Tools For an instance, let’s just assume you want to know how a threat can occur and what damages it can create, at that point you need to think like a hacker and know the tools and techniques they are likely to use. Ethical hacking tools allow anyone to report security incidents by exploring vulnerabilities and flaws within companies to help make their systems and applications less vulnerable. The top hacking tools used by security experts and individuals are listed below: ### 1. Metasploit Metasploit is an open source project written in Ruby that allows to use different cyber-security tools to discover remote software vulnerabilities and functions as an exploit development module. ### 2. Nmap Network mapper is a free, open source security tool used to audit and manage operating system and network security for local as well as remote hosts. By using this tool we can detect open ports on remote hosts, network mapping, exploring vulnerabilities inside the network and audit security devices. ### 3. Wireshark Wireshark is another free, open source software allows you to analyze network traffic in real time. It has sniffing technology from which you are able to intercept and see the results in human readable form. It also saves analysis for offline operation making it more effective. ### 4. OpenVAS OpenVAS or Nessus is one of the best network vulnerability scanners used to detect remote vulnerabilities in any hosts. Mostly system administrators and DevOps professionals use this tool to perform simultaneous multiple scanning hosts. It has a powerful web-based interface able to exports all results in HTML, XML, LateX and plain text. ### 5. Ettercap Ettercap is another famous packet sniffing tool for LAN networks, capable of handling active as well as passive scans and various encrypted protocols such as SSH and HTTPS. It performs network and host analysis with manipulation of the network over established connections, making easier to test man-in-the-middle attacks. Some more tools including John the ripper (password cracking tool), Nikto (Web server scanner), SQLMap (launch SQL code injection tests on remote hosts), Wapiti (CLI based vulnerability scanner) and BeEF are effectively used to perform penetration testing. This article will help you to understand the basic concepts of Ethical Hacking, how to become a Hacker, what are the types of hacking and hackers and the useful tools to perform penetration testing. ## HAPPY LEARNING! 👍 ---
**Author:** ![Hyperdemongod](https://onehack.st/user_avatar/onehack.st/hyperdemongod/32/26170_2.png) [@Hyperdemongod](https://onehack.st/u/Hyperdemongod)\ **Post date:** [May 7, 2020, 3:05pm UTC](https://onehack.st/t/what-is-ethical-hacking-how-to-be-an-ethical-hacker-noob-guide/85089/2 "2020-05-07T15:05:51Z")
Great Article! @Aina Thanks for Sharing!! 🤩 ---
**Author:** ![darekingdom](https://onehack.st/user_avatar/onehack.st/darekingdom/32/36081_2.png) [@darekingdom](https://onehack.st/u/darekingdom)\ **Post date:** [May 7, 2020, 3:17pm UTC](https://onehack.st/t/what-is-ethical-hacking-how-to-be-an-ethical-hacker-noob-guide/85089/3 "2020-05-07T15:17:33Z")
There goes SAM again. Incredible effort you put here man. Pure Respect. ---
**Author:** ![Akosi\_Cedrick](https://onehack.st/user_avatar/onehack.st/akosi_cedrick/32/18110_2.png) [@Akosi\_Cedrick](https://onehack.st/u/Akosi_Cedrick)\ **Post date:** [May 7, 2020, 7:43pm UTC](https://onehack.st/t/what-is-ethical-hacking-how-to-be-an-ethical-hacker-noob-guide/85089/4 "2020-05-07T19:43:56Z")
Can i ask if required to learn programming language ? i started reading Python i dont know i dont have idea what was the purpose of programming language in hacking can you tell me what is it or should we learn programming language even 1 language is Enough? btw 😄 Thanks for u sharing ---
**Author:** ![Mr\_Ifaz](https://onehack.st/user_avatar/onehack.st/mr_ifaz/32/34621_2.png) [@Mr\_Ifaz](https://onehack.st/u/Mr_Ifaz)\ **Post date:** [May 7, 2020, 7:57pm UTC](https://onehack.st/t/what-is-ethical-hacking-how-to-be-an-ethical-hacker-noob-guide/85089/5 "2020-05-07T19:57:36Z")
Superb Bro…Love You.. ---
**Author:** ![rahpue](https://onehack.st/user_avatar/onehack.st/rahpue/32/81243_2.png) [@rahpue](https://onehack.st/u/rahpue)\ **Post date:** [May 7, 2020, 8:00pm UTC](https://onehack.st/t/what-is-ethical-hacking-how-to-be-an-ethical-hacker-noob-guide/85089/6 "2020-05-07T20:00:51Z")
I believe the red hat is categorized as ethical hackers. But I’m not sure about the blue hat. Anyway, it’s very insightful! 👍 ---
**Author:** ![Aina](https://onehack.st/user_avatar/onehack.st/aina/32/167469_2.png) [@Aina](https://onehack.st/u/Aina)\ **Post date:** [May 7, 2020, 8:13pm UTC](https://onehack.st/t/what-is-ethical-hacking-how-to-be-an-ethical-hacker-noob-guide/85089/7 "2020-05-07T20:13:14Z")
> [@Akosi\_Cedrick](#): > > Can i ask if required to learn programming language ? > [@Skills Required To Become A Ethical Hacker A Complete Guide!](https://onehack.st/t/skills-required-to-become-a-ethical-hacker-a-complete-guide/55600): > > Skills allow you to achieve your desired goals within the available time and resources. As a hacker, you will need to develop skills that will help you get the job done . These skills include learning how to program, use the internet, good at solving problems, and taking advantage of existing security tools. In this article, we will introduce you to the common programming languages and skills that you must know as a hacker. Topics covered in this tutorial What is a programming language? Why s… > [@Does Learning Web Development Make You A Better Hacker Find Out!](https://onehack.st/t/does-learning-web-development-make-you-a-better-hacker-find-out/72155): > > OP Thoughts: I started to learn web development a couple of months ago. At the time when I started, I didn’t start because I wanted to become a better Hacker. I started out of a long-lasting curiosity. Coding always fascinated me, yet I always failed in my previous endeavors to learn to code. Maybe I choose the wrong language, maybe I started out of the wrong reasons, I can’t tell for sure, but what I can tell is that I wasn’t able to stick with it. The previous language I failed on where Pyth… > [@How To Become A Hacker | Precious Guide!](https://onehack.st/t/how-to-become-a-hacker-precious-guide/61369): > > Hello 1Hackers blush I’m sharing a worth guide about How to Become a Hacker which was stored in my flash drive a few months ago. worth learning with pro examples as you know me how it brightens the things. lol! There is no guide anywhere to “become a hacker”, it’s like asking for a guide of “how to fix a TV” or “How to solve a bug” without mentioning any more details. If you can’t make sense of those two questions then you can understand why we can’t make sense of your question and why it’… > [@Become A Hacker | A Complete Bible | Get Started 100](https://onehack.st/t/become-a-hacker-a-complete-bible-get-started/83367): > > Getting started So, The patience has gone, many of you probably seeking to have something like this or something like that, let me put it straight, this is not this or that, it’s actually everything that you ever wonder to know to get started, Become a hacker my OneHacker o I’m sure you will enjoy the topic, proceed to continue reading the Hacking Bible! here we go… What is Hacking? Hacking is about identifying weaknesses and vulnerabilities of systems and gaining access to it. A… ---
**Author:** ![PHCORNER\_2020](https://onehack.st/user_avatar/onehack.st/phcorner_2020/32/38937_2.png) [@PHCORNER\_2020](https://onehack.st/u/PHCORNER_2020)\ **Post date:** [May 8, 2020, 4:04am UTC](https://onehack.st/t/what-is-ethical-hacking-how-to-be-an-ethical-hacker-noob-guide/85089/8 "2020-05-08T04:04:09Z")
Nice post bro ---
**Author:** ![Saurav\_P](https://onehack.st/user_avatar/onehack.st/saurav_p/32/24576_2.png) [@Saurav\_P](https://onehack.st/u/Saurav_P)\ **Post date:** [May 8, 2020, 5:50am UTC](https://onehack.st/t/what-is-ethical-hacking-how-to-be-an-ethical-hacker-noob-guide/85089/9 "2020-05-08T05:50:59Z")
yes if you learn python you will not become a script kiddie and will be able to make your own tools and scripts for hacking so go on and learn it though it boring in the start but after you know enough you will make tools in minutes ---
**Author:** ![Akosi\_Cedrick](https://onehack.st/user_avatar/onehack.st/akosi_cedrick/32/18110_2.png) [@Akosi\_Cedrick](https://onehack.st/u/Akosi_Cedrick)\ **Post date:** [May 8, 2020, 6:40am UTC](https://onehack.st/t/what-is-ethical-hacking-how-to-be-an-ethical-hacker-noob-guide/85089/10 "2020-05-08T06:40:41Z")
python is enough no more?