Ethical Hacking 简明教程

Ethical Hacking - Skills

作为一名道德黑客，你需要了解各种黑客技术，例如 −

As an ethical hacker, you will need to understand various hacking techniques such as −

  1. Password guessing and cracking

  2. Session hijacking

  3. Session spoofing

  4. Network traffic sniffing

  5. Denial of Service attacks

  6. Exploiting buffer overflow vulnerabilities

  7. SQL injection

在本章中，我们将讨论你成为道德黑客专家所需的某些技能。

In this chapter, we will discuss some of the skills that you would require to become an expert in Ethical Hacking.

Basic Skills

计算机黑客既是一门科学，也是一门艺术。与任何其他专业知识一样，你需要付出大量努力才能获得知识并成为一名专家黑客。一旦你步入正轨，你需要付出更多努力来跟上最新技术、新漏洞和利用技术。

Computer Hacking is a Science as well as an Art. Like any other expertise, you need to put a lot of effort in order to acquire knowledge and become an expert hacker. Once you are on the track, you would need more effort to keep up-to-date with latest technologies, new vulnerabilities and exploitation techniques.

  1. An ethical hacker must be a computer systems expert and needs to have very strong programming and computer networking skills.

  2. An ethical hacker needs to have a lot of patience, persistence, and perseverance to try again and again and wait for the required result.

此外，道德黑客应该足够聪明来理解形势和其他用户的思维方式，以便运用社会工程漏洞。一名优秀的道德黑客也具备出色的问题解决能力。

Additionally, an ethical hacker should be smart enough to understand the situation and other users’ mind-set in order to apply social engineering exploits. A good ethical hacker has great problem-solving skills too.

Courses & Certifications

本教程提供了成为一名成功的道德黑客的基本准则。如果你想在这个领域脱颖而出，那么你可以选择参加以下课程和认证 −

This tutorial provides the basic guidelines to become a successful Ethical Hacker. If you want to excel in this field, then you might choose to pursue the following courses and certifications −

  1. Obtain a bachelor’s degree in Computer Science or A+ Certificate to gain an understanding of the most common hardware and software technologies.

  2. Get into a programmer’s role for a few years and then switch to get a tech support position.

  3. Proceed to get network certifications like Network+ or CCNA and then security certifications like Security+, CISSP, or TICSA.

  4. It is recommended that you get some work experience as a Network Engineer and System Administrator to understand networks and systems inside out.

  5. Keep going through various books, tutorials and papers to understand various computer security aspects and take them as a challenge to secure your network and computer systems as network security engineer.

  6. Study courses which cover creating Trojan horses, backdoors, viruses, and worms, denial of service (DoS) attacks, SQL injection, buffer overflow, session hijacking, and system hacking.

  7. Master the art of penetration testing, footprinting and reconnaissance, and social engineering.

  8. Finally go for a Certified Ethical Hacker (CEH) Certification.

GIAC（全球信息保证认证）和 Offensive Security Certified Professional (OSCP) 是额外的 IT 安全认证，它们将为您的个人资料增加很多价值。

GIAC (Global Information Assurance Certification) and Offensive Security Certified Professional (OSCP) are additional IT security certifications which will add a lot of value to your profile.

Final Note

您需要始终成为白帽黑客，这意味着您需要在既定的范围内工作。未经当局必需的许可，绝不行使或攻击任何计算机或网络。

You need to stay as a White Hat Hacker which means you need to work within given boundaries. Never intrude or attack any computer or network without a required permission from the authorities.

最后，强烈建议您不要参与可能毁掉您整个职业生涯的黑客攻击活动。

As a final note, it is highly recommended that you refrain from engaging yourself in black hat hacking which may spoil your entire career.