Scribd
Upload
38 views2 pages

Hacking Notes

This document serves as a concise reference guide for ethical hackers and security researchers, covering key topics such as reconnaissance techniques, common vulnerability types, network sniffing, password cracking methods, and legal considerations for ethical hacking. It emphasizes the importance of obtaining proper authorization and adhering to ethical standards while conducting security assessments. Various tools and examples are provided to assist in practical applications of these concepts.

Uploaded by

gfhghyrtf
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
38 views2 pages

Hacking Notes

This document serves as a concise reference guide for ethical hackers and security researchers, covering key topics such as reconnaissance techniques, common vulnerability types, network sniffing, password cracking methods, and legal considerations for ethical hacking. It emphasizes the importance of obtaining proper authorization and adhering to ethical standards while conducting security assessments. Various tools and examples are provided to assist in practical applications of these concepts.

Uploaded by

gfhghyrtf
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

// HACKING NOTES

A concise reference guide for ethical hackers & security researchers

NOTE 01
Reconnaissance & Information Gathering
Reconnaissance (recon) is the first phase of ethical hacking. It involves
collecting as much information as possible about a target system or network before
launching any tests. There are two types: passive recon (no direct interaction
with the target — using OSINT, WHOIS, Google dorking, Shodan) and active recon
(direct interaction — port scanning, banner grabbing, ping sweeps).

# Common recon tools:


nmap -sV -O [Link] # Port scan + OS detection
whois [Link] # Domain registration info
theHarvester -d [Link] # Email/subdomain harvesting

NOTE 02
Common Vulnerability Types
Understanding vulnerability classes is essential for penetration testing. The most
prevalent include: SQL Injection (SQLi) — inserting malicious SQL into input
fields to manipulate databases; Cross-Site Scripting (XSS) — injecting scripts
into web pages viewed by other users; Buffer Overflow — writing beyond allocated
memory to hijack program execution; and Broken Authentication — exploiting weak
credentials or session management flaws.

# SQLi test payload example:


' OR '1'='1' --
# XSS test payload:
<script>alert('XSS')</script>

NOTE 03
Network Sniffing & Traffic Analysis
Network sniffing captures packets traveling across a network to analyze
communications. On unencrypted connections, sniffing can reveal credentials,
session tokens, and sensitive data. Tools like Wireshark and tcpdump are widely
used in security assessments. Always ensure you have proper authorization before
capturing traffic. Countermeasures include using TLS/SSL encryption and VPNs.

# Capture packets on interface eth0:


tcpdump -i eth0 -w [Link]
# Filter HTTP traffic:
tcpdump -i eth0 port 80

NOTE 04
Password Cracking Techniques
Password cracking is a common post-exploitation technique used to recover
credentials from captured hashes. Key methods include: Brute Force — trying all
possible combinations; Dictionary Attack — using wordlists of common passwords;
and Rainbow Tables — precomputed hash lookups. Always use salted hashing and
strong password policies as defenses. Tools like Hashcat and John the Ripper are
industry standards.

# Hashcat dictionary attack:


hashcat -m 0 [Link] [Link]
# John the Ripper:
john --wordlist=[Link] [Link]

NOTE 05
Ethical Hacking & Legal Considerations
Ethical hacking (penetration testing) must always be performed with explicit
written authorization from the system owner. Unauthorized access is illegal under
laws like the U.S. Computer Fraud and Abuse Act (CFAA) and similar legislation
worldwide. Ethical hackers operate within a defined scope of work, document all
findings, and submit detailed reports with remediation recommendations.
Certifications like CEH, OSCP, and CompTIA Security+ validate professional ethical
hacking skills.

# Always confirm before testing:


# 1. Written authorization obtained
# 2. Scope clearly defined
# 3. Rules of engagement agreed upon
# 4. Emergency contacts established

For educational and authorized security testing purposes only.

You might also like