👨‍🏫 Tutorial Paano maging ethical häçker (step by step), lalo na kung nasa Pilipinas ka at nagsisimula ka pa lang sa Kali/Linux.

[NinjaWangya]

​

Hindi ka makaka-häçk nang maayos kung kulang sa fundamentals.

Aralin:​

• Networking
  
  • IP address, subnet, DNS, ports
  • TCP/UDP
• Operating Systems
  
  • Linux (important!)
  • Windows basics
• Programming (kahit isa muna)
  
  • Python (recommended)
  • Bash scripting

Start commands:

ip a<br>ping google.com<br>netstat -tulnp<br>

---

​

Dito ka magwo-work as ethical häçker.

Practice:​

• File system:

ls<br>cd<br>pwd<br>

• Install tools:

sudo apt update &amp;&amp; sudo apt install -y<br>

• Permissions:

chmod +x file.sh<br>
Goal: maging comfortable ka sa terminal

---

​

Ito ang simula ng häçking: reconnaissance.

Tools:​

• Nmap

nmap -A 192.168.1.1<br>

• Wireshark
• Netdiscover

Matutunan:

• Paano makita ang open ports
• Paano identify services

---

​

Hanapin kung saan mahina ang system.

Tools:​

• Nikto

nikto -h You do not have permission to view the full content of this post. Log in or register now.<br>

• OpenVAS / Greenbone

Goal:

• Hanapin ang butas (vulnerabilities)

---

​

Dito mo ginagamit ang natutunan mo.

msfconsole<br>search exploit<br>use exploit/...<br>set RHOSTS target_ip<br>run<br>
Pero:

• Always sa lab lang muna

---

​

Understand authentication weaknesses.

Tools:​

• Hydra
• John the Ripper

hydra -l admin -P rockyou.txt 192.168.1.10 ssh<br>

---

​

Pinaka in-demand skill ngayon.

Aralin:​

• SQL Injection
• XSS
• File upload vulnerabilities

Tools:​

• Burp Suite
• OWASP ZAP

---

​

WiFi testing (legal lab only)

Tools:​

• Aircrack-ng
• Airodump-ng

---

​

Dito ka gagaling:

• TryhäçkMe (best for beginners)
• häçk The Box
• PortSwigger Web Security Academy

Daily practice > theory

---

​

• eJPT (beginner)
• CEH
• OSCP (advanced)

---

​

Ito ang pinaka-importante.

Pwede:

• Sarili mong system
• Lab environment
• Bug bounty programs

Bawal:

• Mang-häçk ng ibang tao/system without permission

---

​

Pwede kang maging:

• Penetration Tester
• Bug Bounty Hunter
• Security Analyst
• Red Teamer

---

​

• 1 hour theory
• 2 hours hands-on (Kali Linux / TryhäçkMe)
• 1 tool per week

---

​

Linux → Networking → Scanning → Exploitation → Web Security → Advanced häçking<br>

---

Real Talk​

Walang shortcut dito:

• Hindi sapat ang tools lang
• Kailangan ng practice + patience
• Kahit pro häçkers, nag-aaral pa rin

 

[3-Style]

tanong ko lang boss isa ka bang ethical häçker or pentester or bug bounty hunter or someone na interested lang din pag-aralan yan?

 

[NinjaWangya]

tanong ko lang boss isa ka bang ethical häçker or pentester or bug bounty hunter or someone na interested lang din pag-aralan yan?

nag aaral pa lang din ako sir