r/learntohack

Denial-of-service attacks (also called "DoS"), while not new, are becoming more and more popular attacks among hackers for taking websites offline. In my experience, the people who use tools designed to carry out these attacks often have no idea what's actually going on under the hood. I will attempt to outline two methods of DoS here- SYN flooding and distributed attacks.

A Bit About TCP

Transmission Control Protocol (TCP), for anyone not familiar, is a protocol that allows for streaming data between two computers on a network. "Streaming", in this context, means packets sent via TCP are treated as segments in a large stream rather than treated independently (as in UDP). As an analogy

Along with discussing what we want in this subreddit, we should also discuss rules and policies. The two major ideas I have for rules are that we should provide information with a disclaimer and that r/learntohack should not be affiliated with any hacking group.

I think it wise that all information in this subreddit be provided with a "use at your own risk" disclaimer. The idea here is to protect contributors from being held liable for what others may do with the materials they've provided. Obviously, not everything in this subreddit will be immediately useable for breaching secure systems. However, in the event an overzealous prosecutor goes after our users for providing/teaching the means

Purpose of r/learntohack:

Stereotypes of hackers pervade the media, enticing young people who would be a perfect fit for the culture, but who try to become a part of it with the intentions of cracking.

Unfortunately, no community exists that effectively guides those young people to true hackerdom. After some discussion on this topic, I decided to make this subreddit.

Structure of r/learntohack:

Newcomers to r/learntohack are given a simple task: in HTML write a home page describing themselves (we have a lose definition of self here). While developing your homepage and slowly mak

A question I often see asked of hackers is "Is there such thing as a 'truly secure' system?" That is, is it possible to create a system that is unquestionably secure and invulnerable? The blunt answer is no, and no system will ever be absolutely secure.

A Thought Experiment

Imagine this: let's build a system that is impervious to every attack out there. Let's put it on a network with several other systems like it, none of them with known weaknesses. Let's put the network in a sealed, disaster-proof bunker that requires multiple people to authenticate at once with multiple credentials (passwords, biometric, etc.). Let's generate our own power and be our own ISP to ensure uptime. Let's

Stereotypes of hackers pervade the media, enticing young people who would be a perfect fit for the culture, but who try to become a part of it with the intentions of cracking.

Unfortunately, no community exists that effectively guides those young people to true hackerdom. After some discussion on this topic, I decided to make this subreddit to fulfill that need.

The idea of the subreddit is to utilize the hacker stereotypes to the community's advantage. Clearly advertise as a hacking subreddit and attract those who wish to hack, but actually wish to crack. Then steer them in the right

Interested in following the objective of this subreddit. I've been sitting on a domain for a while despite only knowing how to use basic programs (wordpress, tumblr, etc), and thought I'd transform my domain into becoming computer literate.

My domain is brienish.com, and is a blank slate right now. anyone else actually doing this?

I'll post simple text on there by tonight.

Hi everyone. I'm sorry I've had to leave for a while, but I cannot regularly access the internet and have bought a ThinkPad that will arrive around August 3rd, which means I'll be back and running this around August 4th, give or take a few days.

I'm also buying & torrenting tons of hacking materials to help this subreddit. Also making a PirateBox as soon as I can go by a tech store for an ethernet cable; I'll explain how that goes.

Can't wait to be back.

I also want to make clear that my idea of "levels" is not like in a video game. It's more like the concept of upvotes. If you have a [0] by your posts you haven't contributed as much to the community as a person with [0,1,2,3,4] by their posts.

So people wouldn't be moving up. They'd be ... becoming part of the subreddit's culture.

But it's only a proposal. I think making the capital social, like upvotes, rather than individual, like game levels, would be more advantageous.

This is a reply I gave in the "first discussions" thread.

My proposal for "levels" is causing a problem because they aren

How can I use C or CPP as a way to escalate myself from administrator to system on Windows? I've been looking around and most of the exploits require third-party apps to be installed. So how can I elevate myself to system on a fresh Windows installation?

I got this great book on Gray Hat hacking, and it's pretty much all done with metasploit. Is this something that is still used, or am I wasting my time?

possible to do this without auth tokens or app permissions?