How did you get into security?
#1
Many many many years back, maybe 10 years back when I still lived with my parents, I used to adhere to strict rules on Internet usage. I'd have limited access to WiFi, but I was still interested in the community of h4(k5! But since my parents would shut down the router at 10 o clock at night, I couldn't really spend my time browsing the internet. That being said, I was really only allowed to use the Internet before 10 o clock to do my homework. My parents would literally sit behind me and monitor my Internet usage.

So, I had to work my way around that. I had to otherwise I'd go insane. They didn't seem to understand that cybersecurity was my passion. So I went to school, registered on a bunch of security forums, went home, said that these forums were for a "research" project and MASS downloaded every fucking ebook I can find. I didn't care what it was about. Build your own crypter, code your own stresser, osint techniques, hijacking accounts, cracking accounts, dynamic malware analysis, kernel exploitation, cryptocurrency, whatever was relevant in tech, I hoarded. This way, after my 10:00 curfew was up, I could still access these shitty ebooks that people had written, but they offered what I found to be very important...a foundation. It gave me a sense of direction and how to organize different types of technological information in my head. Then I'd read encyclopedia dramatica and other ezines for drama in the hacking community. Follow up on stuff, find an infosec goon, and try and finesse information out of them. It was definitely a ride. 10 years later, all this useless information gave me a stronger foundation than anyone in my zone had. I didn't even feel like I was learning. When I learned about polymorphic code, I thought it was the most unique concept in the world. Why don't people use it more often? Etc etc etc. That being said, cybersecurity became ingrained as not just a passion, but a lifestyle that I wanted to pursue. As I aged, I realized certain paths I could take to improve my expertise and thread myself into the community.

I thank communities like this one (although this one is exceptionally well regarded in my opinion) to have given me light in the dark. I have a positive outlook when I browse this forum because everyone on here seems to be united by one reason. The pursuit of knowledge. I like the fact that I don't have to filter out stupid shit on this forum as much as I had to on other sites and see garbage ebooks being resold into oblivion.

I guess this leads me to the thread topic of how did you get into cybersecurity? I'm sure you've been asked many times.
Reply
#2
I've always been been pretty good with computers, runs in the family i guess. When i was young though i used to mod games i played a lot. Back in the day i played a lot of LotR: Battle for Middle Earth, i'd go into the game files and put characters in and change population caps for units and stuff like that. I was always messing around with level editors and the like. I also liked to play Warcraft 3 and World of Warcraft too. If you're familiar with the games, you probably know The Lich king character right? Well what i would do is mod the model of The Lich King from WoW into Warcraft 3, extracted the voice files and basically put the WoW character into Warcraft 3. That was pretty cool, if i do say so myself.

Anyway beyond gaming, i wasn't really interested in tech. Since a family member worked in IT as well i always thought it seemed pretty boring. Until much later when i wold go to fringe forums online and i met a few people who were really into hacking, cryptography and programming. I started talking to them a lot and they showed me some hacks and told me all about how to deface websites and more advanced stuff too. Well as a noob, i was mightily impressed when i saw that sort of thing. And i decided it would be really cool to be able to do stuff like that myself.

After that, i went the route of the skid, joining forums and running freely available tools against random websites and stuff like that. I remember quite clearly being flamed on EvilZone on a number of occasions for being such a noob, lmao. In any case at some point i realized if i was serious about getting into cyber security that i should start actually learning security concepts. From there i went to read on ebooks like you did. I read The Web Application Hackers Handbook and a number of others. At some point i decided that would need to learn a programming language, so i picked Python and taught myself. Justin Seitz's books Grey Hat Python and Black Hat Python were really instrumental into getting me where i am today. Somewhere along the line i also got interested in Malware so i hoarded resources on that. I still like malware a lot especially since i like programming almost as much and in some cases even more as security. Malware is an awesome way of bringing offensive security and programming together.

By the time i was learning Python i also got into Linux and went on to learn Bash from there. Malware also got me interested in OS security. At some point i figured i would use my skills in Python to write open Source security tools for fun and to give back to the security community. And the rest is history i suppose.
Reply
#3
Well, since I was a child I have been a very curious individual. I was always looking for new things to learn about literally EVERYTHING. I used to love going to the library and check for encyclopedias and all that stuff.

However, computers gave me the oportunity of going one step further. I remember getting into programming with pascal and simple bat files and... damn I was the boss! I was doing amazing things with it! (I really wasn't but being able to do with the computer whatever I wanted felt like magic lol).

By that time I was also introduced into cracks and keygens, (I remember just downloading and opening them for the music lol), I was totally amazed by those pieces of software. I wanted to know more about them!
I started making fake keygens in vb just for the lulz

After that I started signing up in several forums, being one of them HS (kind of the legacy of this site). People were just like me! Seeking knowledge, helping each other out, kinda friendly and shady at the same time... IDK I just felt like it was my thing.
Since that moment I have been watching tones of hacking conferences, reading some books... I have been interested in mostly every hacking field that exist if you ask me.

I myself don't feel like I have a LOT of knowledge compared to other people, nonetheless I am really happy to be who I am and I am still pursuing my carreer into security. Let's say I feel I'm in the right path to achieve it.

I would also like to thank everyone who has helped me in whatever stage I was. You have been all very important in my life, and even if I don't personally know you, you are just like a friend.
I remember a lot of people who has been through my life and I do not regret meeting any of them.
Thanks fellow members of the interwebs  Heart
Reply
#4
I was born 1337.
Reply
#5
My parents owned an old Apple //e to do word processing stuff when I was a young kid. I only fucked around with it to play shitty video games or to print out ASCII graphics on the dot matrix printer.

Later, in the mid-90s, my older brother was accepted to a technical high school. He had to have a computer with Internet access in order to do his work, so my mom ended up buying a workstation that was top of the line at the time: Pentium 1 75MHz, 4Mb Ram, ~100Mb disk, and a CD-ROM!@#$ We were one of the only families in my social group with Internet access and that beastly of a computer.

The ISP we used had an IRC server. I'd go on there and bullshit with people after school sometimes. One day, I witnessed a channel takeover. They were knocking entire userbases of channels offline using a variety of other DoS tools, parking Eggdrop bots in the channels, and basically harassing the everloving fuck out of the fine citizens of #teenchat, #hottub, and #news. After a few hours of this, one of the ISP's admins came in and /killed the bots, issued several K-lines, and returned the channels to their respective owners.

I asked him what the hell happened, and he told me all about it. He said that most of them used Linux and linked me several C programs that exploited some of these networking issues. I took my young nerdy ass to the bookstore and bought a book about C and C++. The same IRC operator gave me a shell on an old SunOS machine with a C compiler and I started learning about UNIX, programming, and networking. There were also several free shell places back then like the Super Dimension Fortress and Hobbiton that gave me exposure to other OSes.

Eventually, I got a 486 with the fucking turbo button from a family member after they upgraded the computers at their business. I saved up something like $200 from collecting cans and recycling them and birthday money to buy a modem and the cables for it. I rode over to CompUSA on my bike and stole all of the free trial AOL and Compuserve floppy disks from their cardboard display cases and used them to install Slackware 3.3 on the 486. It took about 2 weeks to download all of the install disks and get it installed on that machine. Took another week or two to figure out how to configure PPP Sad

I spent the next several years writing shitty programs, reading manuals and RFCs, collecting old derelict decommissioned hardware, and reading as much as I could. Looking back, I should have just lived a normal kid life getting in fights, drinking beers, getting laid, and being a menace to society instead of geeking out on computers. I hate them now.
Reply
#6
I remember I got much into computers.. in elementary school when I was at third grade class, I had a friend.. he was twice as good I am with computers.. for his age he knew what CPU's are, what GPU's are.. even drivers and their purposes.. (third grade elementary)
the coolest moment was when he used the CMD to delet the programfiles.. all of this happend in third grade
since then it became really interesting..
I didn't get far, I wasn't a bright kid until high school.. used to barely come to school.. and wasted my time mostly on gaming.. sadly on SAMP
my knowledge about computers never came from school, nor somegroup.. I didn't have much friends.. and I was always the one with the most knowledge in computers.. most of the knowledge I got because of the shortage of money for a computer technician.. fixing problems with your computer is far cheaper than calling a techician.. which sometimes just lies to you to get some money
first time I changed a cpu I fucked it all up.. I thought this is the end..
I watched 100 videos.. and then figured out I accidently bent one pin from the socket
when I got into cheating.. I really loved to play flash games.. but didn't really like to grind all the time in games and wanted to shorten the path..
this is when I met the "cheat engine" at first I cheated simple flash games.. simply buy something, press "search next" until you reach your data
but then the data kept updating.. and you couldn't just change.. so then you need to find the whole code in this..
this was very advanced for my 13 year old ass.. so I barely made it
I managed to hack farmville.. but that is because it wasn't much of a server sided..
why, I really want to study a scripting language:
when I was skipping school.. I played samp a lot.. 1000 hours in one server
and always saw the scripters there as really cool guys.. they make the whole world you play in it.. and told myself.. "wow, I want to make it too" this is when I got interested in programming, I saw how he is making a whole world just by typing some code..

this is mostly it.. I know it is not even scratching the "cyber security" but this is pretty much why I'm in this forum.. and annoying the community with my infine questions about stuff you probably studied in highschool
PS: your stories are like 10 times better than mine..
Reply
#7
(02-08-2018, 10:01 PM)miker2808 Wrote: PS: your stories are like 10 times better than mine..

Lol no! There is no best story!
It is unique for everyone and I loved reading yours as much as I did for the others.
Btw, I used to play SA a lot too just not MP  Rolleyes


(02-08-2018, 07:02 PM)k1tsune Wrote: My parents owned an old Apple //e to do word processing stuff when I was a young kid. I only fucked around with it to play shitty video games or to print out ASCII graphics on the dot matrix printer.

Later, in the mid-90s, my older brother was accepted to a technical high school. He had to have a computer with Internet access in order to do his work, so my mom ended up buying a workstation that was top of the line at the time: Pentium 1 75MHz, 4Mb Ram, ~100Mb disk, and a CD-ROM!@#$ We were one of the only families in my social group with Internet access and that beastly of a computer.
———
Looking back, I should have just lived a normal kid life getting in fights, drinking beers, getting laid, and being a menace to society instead of geeking out on computers. I hate them now.

Damn you were lucky! I wish I were introduced to computers at that era.
And man, don’t be negative, you fulfilled your teenager desires!
Reply
#8
(02-08-2018, 10:01 PM)miker2808 Wrote: this is mostly it.. I know it is not even scratching the "cyber security" but this is pretty much why I'm in this forum.. and annoying the community with my infine questions about stuff you probably studied in highschool
PS: your stories are like 10 times better than mine..


Come on man. Your story was just as interesting as the other ones. Also, i haven't experienced your presence on this forum as an annoyance. I think it's great you want to learn more, that's why we're all here right?
Reply
#9
(02-08-2018, 10:01 PM)miker2808 Wrote: this is mostly it.. I know it is not even scratching the "cyber security" but this is pretty much why I'm in this forum.. and annoying the community with my infine questions about stuff you probably studied in highschool
PS: your stories are like 10 times better than mine..

I also want to comment on this.

I started on security forums half a decade ago That's where it all started. These communities raised me in a way, and it was members of different communities that pushed me to pursue a career in InfoSec. It was also the same communities that got me my first tech job, and the same communities that helped me attend security conferences where I found my first real security opportunity. It was also a community member that encouraged me to pursue University. Point being, my journey started on hacking forums, and it's OK if yours does too.

Don't put yourself down. We all start somewhere.

We founded GreySec to provide hackers with a community and a place to share and learn. That includes you, too... provided you follow the rules and I don't have to ban you.
Reply
#10
I quite enjoy reading all your stories. It makes me happy that most of you are here with an optimistic attitude to learn and better yourself.

Thank you all for participating in this thread. Smile
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  how to get Telnet working on this network? QMark 16 875 07-02-2020, 07:08 PM
Last Post: QMark
  What are you currently listening to? Vi-Sion 21 9,050 06-25-2020, 11:32 PM
Last Post: Insider
  How did you find GreySec? Insider 8 1,168 06-11-2020, 11:11 PM
Last Post: Insider
  Do you have a Gucci coat? LOSTINSAUCE 16 9,333 05-25-2020, 06:19 PM
Last Post: WendyMorris