White hack hackers do not infiltrate real systems unless performing penetration tests. However, since real world hacking is illegal and they don't participate in this, how do they know their skills are up to snuff if they aren't penetration testers? Have most of them even hacked anything? And how can they possibly, legally learn these skills when real world experience is illegal? How can they know if they are skilled? How can they become penetration testers?
Forum Thread: How Do You Know Your Skills
- Hot
- Active
-
Forum Thread: Hello Guys I Am Just a Begineer in Hacking,Vpn,Proxies and Many Others but I Am Confused That Does Website Proxies Hide 9 Replies
2 hrs ago -
Forum Thread: Hack Instagram Account Using BruteForce 196 Replies
10 hrs ago -
Forum Thread: How to Hack a Website to Edit It 19 Replies
10 hrs ago -
Forum Thread: Android Doesn't Connect Back to Metasploit with App Payload? 18 Replies
1 day ago -
Forum Thread: Hacking Facebook,Twitter,Instagram Account Passwords with BruteForce 156 Replies
1 day ago -
Forum Thread: Kali Linux WiFi Problem? 41 Replies
2 days ago -
How to: HACK Android Device with TermuX on Android | Part #1 - Over the Internet [Ultimate Guide] 173 Replies
3 days ago -
Forum Thread: How to Start Listening Connections on Metaslpoit (WINDOWS) 8 Replies
4 days ago -
Forum Thread: Grab Target's Webcam by Link 4 Replies
4 days ago -
How to: HACK Android Device with TermuX on Android | Part #2 - Over WLAN Hotspot [Ultimate Guide] 24 Replies
5 days ago -
Forum Thread: Complete Guide to Creating and Hosting a Phishing Page for Beginners 41 Replies
1 wk ago -
Forum Thread: No Wireless Extensions in Linux Debian 3 Replies
1 wk ago -
How to: Sign the APK File with Embedded Payload (The Ultimate Guide) 6 Replies
1 wk ago -
Forum Thread: Bruteforce Password Cracker (ghoster_brute) 6 Replies
2 wks ago -
Forum Thread: Txpower Adjustment? 17 Replies
2 wks ago -
Forum Thread: How to Controll Multiple Devices Using a Meterpreter ? 4 Replies
2 wks ago -
Forum Thread: Delete Infected Apk from Victim Phone Remotely 1 Replies
2 wks ago -
How to: Install Metasploit Framework on Android | Part #1 - in TermuX 81 Replies
2 wks ago -
Forum Thread: The Most Anonymous Reconnaissance Technique? 1 Replies
2 wks ago -
Forum Thread: Tp-Link wn8200nd 2 Replies
3 wks ago
-
How To: Perform Keystroke Injection Attacks Over Wi-Fi with Your Smartphone
-
Hack Like a Pro: How to Hack Facebook (Facebook Password Extractor)
-
How to Hack Wi-Fi: Cracking WPA2 Passwords Using the New PMKID Hashcat Attack
-
How To: Top 10 Things to Do After Installing Kali Linux
-
How To: Hack Android Using Kali (Remotely)
-
How To: Crack Password-Protected ZIP Files, PDFs & More with Zydra
-
How To: Phish for Social Media & Other Account Passwords with BlackEye
-
How To: Find Identifying Information from a Phone Number Using OSINT Tools
-
How To: 4 Ways to Crack a Facebook Password & How to Protect Yourself from Them
-
Android for Hackers: How to Turn an Android Phone into a Hacking Device Without Root
-
How To: Buy the Best Wireless Network Adapter for Wi-Fi Hacking in 2019
-
How To: Brute-Force Nearly Any Website Login with Hatch
-
How To: Check if Your Wireless Network Adapter Supports Monitor Mode & Packet Injection
-
How To: Hunt Down Social Media Accounts by Usernames with Sherlock
-
How to Hack Wi-Fi: Stealing Wi-Fi Passwords with an Evil Twin Attack
-
How to Hack Wi-Fi: Cracking WPA2-PSK Passwords Using Aircrack-Ng
-
How To: Spy on Traffic from a Smartphone with Wireshark
-
How To: Run Kali Linux as a Windows Subsystem
-
How To: Gain SSH Access to Servers by Brute-Forcing Credentials
-
How To: Find Anyone's Private Phone Number Using Facebook
2 Responses
They can set up their own servers or computers to hack, primarily through Virtual Box or Virtual Machine.
However a majority of "cybersecurity" engineers lack any experience hacking, hence why security jobs are hot.
As for your other questions, I'm not sure how to answer them. A majority of "white hats" are not as skilled as they should be, but technology is always advancing and so they have to continuously learn new things.
Problem solving capabilities is key.
Developing that and coupling it with your technical knowledge is the best way to go about it. It's been said before by myself, OTW, and many others; problem solving is a critical skill to have for hacking.
Labs are a good option to test your hacking, as well as bug bounties to develop your zero day exploit finding skills, et cetera.
There are many ways to develop yourself that isn't just "hack this and you get better" and in fact, sometimes that isn't even the best way.
The worst thing to happen in a lesson, is for you to have no problems to solve. What if, for instance, you hack a website and it goes off without a hitch? You've not gotten better, you've learnt nothing.
The reason a lot of security professionals are maybe not as good as they'd like to be, is because their only experience, the only way they've dealt with security is defensively. However, learning how your opponents will attack you is critical. It's just like warfare, know your enemy. Having this knowledge will have you much better equipped to defend against attacks because you know what their next steps are likely to be, therefore, you can stay a step ahead.
This is why we're all here, this is what I try to explain to everyone. We can give you all the answers, and that's all well and good, but you learn very little that way. Learn to solve the problems you're faced with, and you're then that much better equipped to deal with future problems.
ghost_
Share Your Thoughts