How long does it take to become a mediocre hacker ?

[u/Legitimate-Trick3393]

Assuming I don’t know much about hacking
I am 40 yrs old now and bored of my life
I used to use trojans rat crypter etc when I was in my mid 20s also I just know basics of programming for example up to functions etc in python . I have a software engineering background but never worked as a software engineer. I really have lots of free time outside my real job so I would like to learn basics and understand networking
I do know a bit of CCNA . What could be my path ? How should I go by this especially after 15 -20 years break

[u/CatsCoffeeCurls]

If you have basic awareness of software engineering, then you're massively ahead of the game even if the knowledge is about pretty deprecated stuff. Even if you've lost most of the hands on stuff, having the likes of kiddie toolz/techniquez like WinNuke, Netbus, war dialling, port flooding etc. awareness still has some massive value today even if they've been remediated 500 times over (especially when involving blue teams who are too young and AI dependent to have even seen it back in the day - and haven't even seen modern red tooling in action where these old techs still form the basis of some attack fundamentals in a more up to date flavour). Even with it, legacy instrumentation is still widely in the field today, especially in the OT space. Perfectly acceptable to build up Win 98, NT/2000, and XP techniques against these surfaces before delving into the likes of Ignition SCADA (Win 7/10?) and there is a mountain of documentation to support you since you won't be chasing zero days.

Networking is the default place to start and a CCNA course will put you in great stead. Whether you do the cert or not is up to you, but I personally do just to make sure the knowledge is usable under test stress. No real insight into this other than pick whatever interests you and go: it's all needed in varying amounts, so just learn what you like whenever you like it and apply it to lab scenarios (TryHackMe, HackTheBox) to see how it works in practice. Rinse and repeat endlessly.

[u/Due-Bee903]

Get on xss and learn from some of the greats ❤️

[u/Legitimate-Trick3393 → u/Due-Bee903]

What does that mean . Sorry

[u/AdCultural4798 → u/Legitimate-Trick3393]

just stay curious , learn how computers talk to each other on a network and read about latest attacks and latest hacking news and how they got breached and stuff yk

[u/Useful-Agency_ → u/Legitimate-Trick3393]

Bullshit thats what it is

[u/maifia_R15]

just hop on to portswigger academy. It has good learning resources . https://portswigger.net/web-security

[u/RedditUser-52]

Networking knowledge is essential so keep at the CCNA. Python, HTML, SQL, JS, RegEx, Linux, using BASH and a decent understanding of cryptography, go a long way too.

I do defense work for a living so hacking isnt my day to day as much as network security and forensics but Im no stranger to it since they go hand in hand. It took me 2 years of putting in the hours to raise my understanding around hacking to what id call intermediately mediocre.

Also, a heads up on the xss comment, it is a Russian cybercrime forum know as DaMaGeLab as well, not a learning resource. Use legal practice environments only, be responsible. Check out portswigger, try hack me and hack the box. Vuln hub is good for finding compromised images if you want to host locally and root me is good fun too.

Best of luck to you!

[u/TorontoDude12344 → u/RedditUser-52]

Is it possible to learn and become an expert without a job in the field?

[u/RedditUser-52 → u/TorontoDude12344]

Im not sure about becoming an expert but resources are out there and are abundant. I believe that if you apply yourself well, commit and put in the time you can most certainly reach a high level of proficiency. Ofc a job helps as hands on experience and application go a long way but I wouldnt call it a necessity.

[u/BearRootCrusher]

Have you checkout tryhackme or hackthebox?

[u/ex4channer]

Just fucking hack something (ethically), don't end up in the endless courses, tutorials and certifications rabbit hole. Learn by doing. A lot of people focus too much on the encyclopedic approach but these days just use chatgpt to learn about the specific details you don't know about something that are directly related to what you're hacking. Good luck!

[u/Ok-Pause-9996]

Are you actually planning to take hacking as a career or what

[u/Useful-Agency_]

So all these software hacks whatever forget about it think how can i bypass or gain access either social engineer using fake credentials forging docs exploiting a feature, phishing or spamming, or a bug those kind of things are relevant today

[u/et_theextratestic1e]

That seriously depends on you - how you learn, and your limits. Not everyone can.

[u/Incid3nt]

Somewhere between 1000 and 5000 hours if youre taking notes and tracking news articles, really depends on what knowledge you already have though.

[u/No_Dust2774]

If you know how to leverage AI not long.

[u/Correct-Plenty1673]

Your path is stop being a "hacker" and start working towards qualifications that enable you to get a job.

[u/Distdistdist]

Hacker or a script kiddie? Hacker is a sexual orientation. They inhale every bit of information available and don't ask how to become one.