Security Solutions: Hacker sites

I visited some of the hackersites too, and yes some of their downloads are contaminated with trojans. But all the time I spent there reading their stuff made me stronger against attacks from the underground. It's worth every minute of it, but play it safe...

Hi, the anonymous email address, and the locked down browser I can do. but how do you setup a proxy server to make browsing hacker sites safe? Simple answers please!!! :-)

But it's more a case of "Know Thyne Enemy" rather than any real interest in what is going on at these sites. I place all this down to study and nothing more and even then I use a dedicated computer that is isolated from the network and is a stand alone unit even with the very best security we are still playing a catch up game with these people.

So I use a computer that is of no importance to anything and even if it is affected there is no real harm done, what worries me is that something new will be downloaded into my system and take it down long before the problem is discovered and a fix been made. So personally I don't care how secure you think your network is there will always be something new that you can't guard against so I just don't take the chance.

This is some shit man...I like this stuff..I`ll have to go and check out what these guys are doing...

I think this can also let hackers know that someone is peeking in on them..So I fig you guys need to talk in code out here...

Cheers...dstatic.

All:
The title says it all. I found this article very interesting and potentially very useful, once I learn how to access an anonymous proxy.
U'mmmm ... how do I know the free anonymous proxy isn't a hacker site, waiting to catch naive admins?
??
S

I visit "security" sites all time, and yes, my manager cringes everytime he sees Astalavista, or Neworder up on my screen. As far as downloading tools, you should check out insecure.org. It is safe as it is a real security site, no " ". Tons of "security" tools for nix and win. And ALWAYS use a proxy. I have a certain "free" account at a certain proxy provider, and don't go to these sites without it. I have downloaded a few tools that contain virus/trojans but my anti-virus caught them....damn h4x0rz... you may want to brush up on your 1337 as well.

I just finished reading "Hacking Exposed", and it will curl your hair! True, it is about 3 years out of date on Microsoft OS'es, having been published in 2000, but the tricks and tips still apply even with Win2k3 and the latest Linux distribution.

It seemed like a very informative work for someone new to the hacker mindset, like me and probably most of you. Reading it will make you see your networks from a new perspective, and make you go, "NO WAY! CAN'T BE TRUE!"

I found it at my local library.

jt

I also agree that its a good idea to see what the enemy is doing. But I'm not sure its a good thing for everyone to list the hack sites of choice.
Considering some of the questions that are constantly being asked on the Q/A site, it may be that the people being discussed in this article come to places like this to learn and observe. So for some wanna be script kiddie or rookie hack the links provided in this article may be a place to find more tools to use. Also once the real creetins find out that they're being observed they'll either disapear deeper into the darkness or will start posting bogus material.

Watch, listen and learn? Yes, but keep it quiet.

I've found that visiting hacker forum sites are much better sources of information and tools. Sure, there's script kiddies and a lot of nonsense, but also some very interesting folks out there. Usually safer than normal hacker sites.

Several sites encourage security folks. Most hackers don't seem to think they could be caught and enjoy bragging. You just need to wade through the crap a bit. A lot of insight can be gained watching some of these forums.

My two recommendations:

http://www.governmentsecurity.org
This is THE friendliest site on the net and well managed. They regularly purge their membership of idiots and skiddies and dump stupid posts. Free membership is required to view most of the forums and membership is often closed for periods of time to discourage the lamers. Finally, if you don't contribute to the board, you're purged.

http://www.security-forums.com/
This one's good too, but has more crap, jokes, wanna-be's. Free & can read without signing up. Read all posts by m3du54 for an eye-opening education.

I am appalled at the level of vulnerability that our systems are at today. There is no excuse, none, why an administrator shouldn't know their network and how it could be attacked.

There are so many tools out there that the administrator can use to check vulnerabilities, that any administrator worth their salt should be able to use the tools and not be able to gain access.

Now, I have heard the argument about administrators being busy with mundane meetings, password resets, and other busy work. My answer to this is: learn to say no. What? Get fired? Not likely.

There is too much at stake to rehire another admnistrator and I value integrity over any "yes" job any day of the week and twice on Sunday.

If your boss is demanding you give time to the mundane details consider an internship through the local colleges. Your time should be spent securing and administrating the network as a whole.

Any knowledge of how the network is operating is good as gold. Even if you have to spend time away from work to check it. Sure, families need to spend time with each other; I don't condone a 24/7 schedule. However, you need to make unscheduled periodic checks into remote access from your home or whereever you can get internet access.

This means

This means when you have a cell phone, a laptop, a PDA, or a tablet PC with Internet access, you should use it to try and gain access to your network by sniffing ports and IP ranges. Hackers use whatever tools are available. I wouldn't be surprised if they have come out with a watch that can scan wireless access points!!

In conclusion, always be prepared.

Thanks for the help with link or site to the hackers. All sites are informative and educative. I have signed as a member to antionline.com and I know before end of 2004, I will achieve more than I have now. And with this help, I will become well advance in my field and my studies.

Thank you and God bless