A few Hacking/Net Security questions please help.

[MMAUY]

I have been getting very interested in hacking not for bad of course but for the good of network security, I have been reading books on this, and it all comes down to software, In every book I have read they mention that hacking software is usually freeware and easy to find, but mentions no tittles, I have looked all over the net but found nothing. Does anyone know of any sites, utilities, software, tools, related to hacking and net security?

[14049752]

It honestly depends what you're looking for and what you want to test the network for.
If you're testing a server for vulnerabilities, the first place to start is typically open ports. For that, get a port scanner like nmap. From there, it depends on what's open or broadcasting. There are SQL exploits, OS exploits, ARP exploits/spoofing, and anything else you can think of floating around.

I'm not going to go into much detail as far as the tools go, because script kiddies annoy me (I'm not saying you are, but those that are can read this, too). There are plenty of "tools" to test security...I sort of find it hard to believe that nothing came up in your search.. If you search for specific things like "man in the middle" attacks, sql injection, or whatever, you should find what you're looking for.

[MMAUY]

It honestly depends what you're looking for and what you want to test the network for.
If you're testing a server for vulnerabilities, the first place to start is typically open ports. For that, get a port scanner like nmap. From there, it depends on what's open or broadcasting. There are SQL exploits, OS exploits, ARP exploits/spoofing, and anything else you can think of floating around.

I'm not going to go into much detail as far as the tools go, because script kiddies annoy me (I'm not saying you are, but those that are can read this, too). There are plenty of "tools" to test security...I sort of find it hard to believe that nothing came up in your search.. If you search for specific things like "man in the middle" attacks, sql injection, or whatever, you should find what you're looking for.

Ok cool thanks yea all I was searching for was Hacking tools and net security tools. I have no idea what a script kiddie is so I assume I am not one. Again thanks for the help, anyone else have some info? Thanks everyone

[14049752]

Heh! Yeah, I wasn't saying you're a script kiddie.
They're basically just kids that think they have something to prove but don't have any idea what they're doing. They're called script kiddies because they're "hacking" using premade scripts and just pointing them at whatever.
A long time ago, when I was a regular on IRC and such, they used to try to get people's ip addresses and anything they could. It was fun to tell them that my IP is "127.0.0.1" or "192.168.1.1" and have them nuke themselves....

[ComputerLife]

packetstormsecurity.org

[RKDus]

Try backtrack, it's a bootable Linux CD with tonnes of hacking programs on it.

[TimeCode]

From McAfee. ;)

http://www.foundstone.com/us/resources-free-tools.asp

[MrMille]

Try the metasploit framework,
it's easy to use, and the vnc injection can be fun'ish.

[minuswires]

Backtrack is the defecto standard for Pen testing which as mentioned also contains metasploit. And if you have an Iphone that's Jailbroken you have metasploit there as well.

For hacking fun, in your OWN network ofcourse. Cain & Able is really sweet.
you can find it at www.oxid.it

Languard by GFI can also be used for good and evil.

Security is not only about software tho.
-It's about applying good practices
-Using passphrases and not passwords
-Using Screen Saver lock when in idle
-Proper signage in the business
-Be smart and clever and watch out for Social Engineering Attacks which are just as devastating to your business
-Shredding all your personal/business documents for those would be dumpster divers

I could go on for ever.

Just as you are on community sites like this, keep yourself updated by listening to podcasts such as

Security Now- More fore newbies but he's very informative
Paul Dot Com Secuirty Weekely
and 2600's Off The Hook which is not really about hacking but they do cover some good current tech/security/hacking/politics news.

[JRoss]

It was fun to tell them that my IP is "127.0.0.1" or "192.168.1.1" and have them nuke themselves....

Thank you. My life needed a little levity today.