해킹 단계: 해커 지망생을 위한 필수 단계

### 해킹의 이해 도구를 넘어선 필수 단계
* 🔍 해킹 도구에 대한 10분짜리 YouTube 동영상은 도움이 될 수 있지만, **진정한 해킹은 단순히 도구를 사용하는 것 이상의 여러 단계를 이해**해야 하기 때문에 숙련된 해커가 되기는 어렵습니다.
* 💡 "훌륭한 해커는 성공적인 공격을 수행하기 위해 **해킹 도구에 의존하는 것이 아니라 창의적이고 독창적인 사고 능력**에 집중합니다."
* 📚 해킹의 첫 번째 단계는 정찰로, 해커는 취약점을 파악하기 위해 공격 대상에 대한 정보를 수집하며, **이 중요한 단계에 몇 주 또는 몇 달**을 투자하는 경우가 많습니다.
* 🔎 이 단계는 대상과 교전하지 않고 정보를 수집하는 **수동 정찰**과 직접적인 상호작용을 수반하므로 더 위험하지만 더 신뢰할 수 있는 **능동 정찰**로 나눌 수 있습니다.
* 💭 정보를 수집한 다음 단계는 익스플로잇으로, 해커는 단순한 도구가 아닌 **문제 해결 능력을 바탕으로 표적을 침해할 창의적인 방법**을 고안합니다.
* 🔒 일단 액세스 권한을 얻은 후에는 더 높은 수준의 액세스 권한을 얻기 위해 **권한 상승**이 필요하며, 이러한 목적을 달성하기 위해 **소프트웨어의 취약점을 악용**하는 경우가 많습니다.
* 🔗 이후 해커는 **시스템 프로세스를 조작하는 루트킷이나 리스너를 설치**하는 등의 방법을 사용하여 **백도어를 열어두고 액세스를 유지**할 수 있습니다.
* 💾 마지막 단계는 중요한 데이터를 추출하고 탐지를 피하기 위해 흔적을 은폐하는 것으로, **익스플로잇 단계뿐만 아니라 해킹의 모든 단계를 마스터하는 것**이 중요하다는 점을 강조합니다.

전문 해커는 공격을 효과적으로 실행하기 위해 도구뿐만 아니라 창의력과 문제 해결 능력에 의존합니다.

you'll be surprised to know that while watching a 10-minute YouTube video demonstrating a specific hacking tool can be useful, it won't necessarily help you in becoming a skilled hacker or empower you to execute a successful attack. This is because most of the videos you see online focus solely on one phase of hacking a system rather than discussing the complete picture and don't really mention the fact that a good hacker doesn't rely on hacking tools for carrying out a successful attack, but rather focuses on their ability to think creatively and uniquely when orchestrating such an attack. That's why in this video, I'll walk you through the different phases that are truly involved in hacking a system and explain how keeping these phases in mind the next time you watch a YouTube video will actually help you in becoming a professional hacker. So let's get started. This video is sponsored by brilliant.org. While learning how to approach hacking the right way is crucial, it's equally important for an ethical hacker to understand what they're dealing with and

how the technology they're thinking of hacking actually works. Brilliant.org is the go-to platform for building this understanding, as they offer a variety of interactive courses on computer science, math, and data science. What sets it apart is its fun and graphical UI that teaches you by making you engage in hands-on activities rather than just presenting theory. Given the scope of this video, I've personally found their courses on applied computer science very valuable, as they help in clarifying concepts on how various technologies like chat GPT or search engines work in a short amount of time. So whether you're an ethical hacker looking to upskill or a student looking to ace your exams, you can try everything Brilliant has to offer free for 30 days. And if you sign up using Brilliant.org/Andali, the first 200 of you will get an exclusive 20% discount on Brilliant's annual premium subscription. Thanks for listening, let's get back to the video. Disclaimer: this video is intended for cybersecurity enthusiasts and is for educational

purposes only. Hacking someone or something without permission is highly discouraged and can result in serious legal consequences. Step number one: reconnaissance. Reconnaissance is the act of gathering information about your target, and it is the first step that any hacker takes before hacking someone. The main goal of doing reconnaissance is to either identify a vulnerability in the target system or understand their psychology to perform social engineering attacks on them. Great reconnaissance is crucial to execute a great attack, and a professional hacker invests somewhere between weeks or even months doing reconnaissance rather than jumping straight into performing an exploit. Now, while there are multiple techniques of doing reconnaissance, it can be broadly divided into two categories. So, let me walk you through them one by one. Firstly, we have passive reconnaissance. Passive reconnaissance is what a hacker does when they gather information about their targets without actually touching or engaging with them. It involves techniques like open-source intelligence, dumpster diving, or web crawling, and is much safer but less reliable to do, as the data found might be outdated or even

manipulated active reconnaissance, on the other hand, is more reliable but riskier to do, as it involves actually engaging with the target rather than observing them from a distance, and can increase the likelihood of being detected. Some common examples of this type of reconnaissance would be socially engineering the target into giving out the information themselves, or scanning the target's website with tools like nmap. Step number two: exploitation. After doing proper reconnaissance, a hacker then moves on to brainstorming different ways for hacking the target, and this is where his ability of thinking outside the box that I mentioned at the start of the video comes into play. Now, while this step would require a hacker to have knowledge about various attacking vectors and their corresponding hacking tools, a large portion of his success wouldn't actually depend upon these things but would rely upon his ability of thinking creatively and coming up with unique solutions to certain situations. So, for instance, if a hacker wanted to hack a person that was living in the same city as him, instead of going through the complex tactic of tricking

the target into installing a payload on his computer. He could simply drive up close to the target's residence and hack his Wi-Fi to ultimately achieve the same results by gaining local access. This creativity and the ability to think outside the box comes from a hacker's personal experiences and their problem-solving capabilities. Step number three: privilege escalation. After successfully exploiting a system or a network, a hacker may also find themselves signed in as a regular user rather than being an admin or a root user. And this is where their primary goal shifts from achieving the main objective to a process known as privilege escalation. Privilege escalation basically means gaining a higher level of access than what a hacker already has, and it is most commonly done in client-side attacks where a target is compromised through their vulnerable software, such as an outdated web browser or a third-class document reader. Step number four: leaving a back door open. Once a hacker has successfully exploited the system and escalated their privileges, they then set up a way to stay connected to the system.

and achieve persistence even after it is restarted or rebooted. For this, they install something called a listener or a rootkit on the targeted device and set up a backdoor for themselves to return and continue controlling the system. This listener or rootkit can take many forms, but the most understandable example would be something that manipulates startup processes in the Windows registry and allows the attacker to gain continued access. Step number five: extracting data. After performing the mentioned four steps, a hacker would ultimately do the main thing for which he hacked the target: to extract or exfiltrate their data. This data might be credit card information, personal identifiable information, or any other thing that might be valuable to the hacker. Step number six: covering tracks. Finally, to make sure that nobody finds out and traces the hacking back to the hacker, they then take several approaches to hide what they did and cover their tracks. This involves doing things like deleting log files or any command history they might have used. And if you're interested in learning about how

this phase of the attack is done. You can search Google for the term anti-forensics and read a few articles to gain insights. Anyway, guys, so this was it for the video. Before ending, I would like to emphasize that while watching YouTube videos on hacking tools is a great place to start and learn how certain tools work, try not to get caught up solely in the exploit phase of an attack and take the time to learn how someone can improve their problem-solving skills, master the art of reconnaissance, or clear their tracks to stay anonymous. If you have any questions, make sure to ask them in the comment section down below, and I'll see you in the next one.

Your Approach to Learn Hacking is WRONG!!

An0n Ali

해킹 도구에 대한 10분짜리 YouTube 동영상을 시청하는 것만으로는 숙련된 해커가 될 수 없습니다.

이러한 동영상은 해킹의 한 단계에만 초점을 맞추는 경우가 많기 때문입니다.

성공적인 해커는 단순히 도구를 사용하는 것보다 창의적인 사고와 전체 상황을 이해하는 것에 더 많이 의존합니다.

이 동영상은 또한 컴퓨터 과학 및 기술에 대한 대화형 강좌를 제공하는 Brilliant.

org를 홍보하며, 30일 무료 체험판과 선착순 200명에게 20% 할인을 제공합니다.

정찰은 취약점을 식별하거나 사회 공학을 수행하기 위한 정보 수집을 포함하는 해킹의 첫 번째 단계입니다.

정찰은 안전하지만 신뢰도가 낮은 수동 정찰과 위험하지만 신뢰도가 높은 능동 정찰로 나뉩니다.

두 번째 단계는 익스플로잇으로, 해커가 창의적인 사고와 공격 벡터에 대한 지식을 바탕으로 대상을 해킹할 수 있는 독특한 방법을 고안하는 단계입니다.

해커의 프로세스: 익스플로잇의 단계

해커는 Wi-Fi 해킹과 같이 로컬 리소스를 창의적으로 악용하여 공격 대상의 시스템에 액세스할 수 있습니다.

일단 내부에 진입하면 권한 상승을 통해 더 높은 수준의 액세스 권한을 획득하는 것을 목표로 합니다.

통제권을 확보한 후에는 지속성을 위해 백도어를 설치하고, 중요한 데이터를 추출하고, 마지막으로 탐지를 피하기 위해 흔적을 은폐합니다.

포렌식 및 해킹 방지 도구에 대한 인사이트

이 동영상은 공격의 한 단계가 완료되는 과정을 설명하며 시청자가 안티포렌식을 연구하도록 장려합니다.

공격의 익스플로잇 단계에만 집중하는 것이 아니라 문제 해결 능력을 향상하고 정찰을 숙달하는 것이 중요하다는 점을 강조합니다.

발표자는 댓글 섹션에 질문을 초대하고 다음 동영상에서 시청자를 만날 것을 약속합니다.