Chat With A Hacker Wannabe

hacker wannabe :

hi

any software for sql injection?

me:

Software to do sql injection or software to protect your sites from sql injection? ;-)

wannabe:

for hacking

me:

Do you know SQL?

wannabe:

i using gui only php myadmin or dreamwaver automatics

me:

Try learning SQL.

wannabe:

ok

chek this

http://www.———.com/admin/index.php

username = admin

password = anything’ OR ‘x’=’x

how is that?

me:

It can be easily prevented by using PHP’s mysql_real_escape_string function.

wannabe:

thanks

me:

You are welcome. ;-)

10 minutes later:

wannabe:

i developing a gpl php script for “fake pages” , i can distribute it?

me:

what fake pages?

wannabe:

gmail ,google wave etc….

me:

What does your script do?

wannabe:

login—admin—-database

full management

me:

I am not sure what do you mean by fake pages. Please explain.

wannabe:

i created gmail fake page ..if user login with that page i will get uername and password…

i developing for ethical hackers

me:

What you are trying to do is neither hacking nor ethical.

You are trying to do something that could land you in jail.

wannabe:

ok

me:

Hacking means “modifying of a program or device to give the user access to features that were otherwise unavailable”.

wannabe:

i am try to study ethical hacking :D

me:

An ethical hacker is “a good guy who focuses on securing and protecting IT systems”.

First, try to learn programming.

Some links for you:

Teach Yourself Programming in Ten Years: http://norvig.com/21-days.html

How To Become A Hacker : http://www.catb.org/~esr/faqs/hacker-howto.html

A story: Master Foo and the Script Kiddie : http://catb.org/~esr/writings/unix-koans/script-kiddie.html ;-)

Also check: http://www.cyberlawsindia.net/

Ok, bye for now. ;-)

wannabe:

very good …………

me:

Read those links, there are a lot of stuff for you to learn. bye for now.

wannabe:

bye

References

• Teach Yourself Programming in Ten Years
• How To Become A Hacker
• Master Foo and the Script Kiddie
• Cyber Laws India
• mysql_real_escape_string – PHP Manual

Related Links

What an apostrophe can do to your site?

Further Readings

• SQL injection
• Phishing
• Script kiddie
• Hacker (computing)
• Hacker (programmer subculture)
• Psychology of a (wannabe) Hacker!
• Extra : A wannabe Hacker’s Story