Pages

1.20.2011

Hacking to Learn

These days the word hacker carries a negative connotation for most people. Whether its a misconception caused by the mainstream media, or an individual's own experience with data theft, most non-geeks think of hackers as being some kind of criminals. While it may be true that there are some hackers out there that use their skills for personal gain, most geeks like myself see hacking in a different way.

For the non-criminal geeks, hacking is something to be taken as a challenge to prove one's skills. Knowing how to crack a WEP key for someone's wireless network can be used for both good and bad. Of course you could leech Wi-Fi from your neighbors, but the opposite argument also applies. You could instead use your skills to show your neighbors that they have a security issue, and that you can fix it for them. That is the essence of offensive security. In order to be able to defend a system from penetration, one must know what that system's vulnerabilities are. Consider this. Most people believe that their houses are secure, but if locked out of their own houses, could probably find a way in. The same principle applies to network security.

I have taken it upon myself to learn this other side of security, and have been coming along with it within the last few weeks. I have already learned how to crack WEP using aircrack-ng on Linux and am currently tackling WPA cracking. If you are a geek and have an interest in learning these tools, I encourage you to use them for good. Backtrack 4 is the best way to start, as it contains almost every cracking, hacking, and penetration tool one would ever need. Please don't hack anyone's networks without permission, or sniff passwords at a coffee shop, because both of these could land you some jail time.

I will write follow-up articles, and possibly tutorials on how to use these tools, so please continue to follow my blog if you are interested.

No comments: