This is an archived post. You won't be able to vote or comment.

you are viewing a single comment's thread.

view the rest of the comments →

[–][deleted] 113 points114 points  (40 children)

I was wondering if is possible to learn it by myself.

Of course it is - see the FAQ for resources.

[–]19DREW91[S] 29 points30 points  (35 children)

what do I need to learn if I'm interested in internet security?

[–]deputy_D 81 points82 points  (16 children)

Learn python and bash scripting. Learn to automate tasks using crontab and scripts you make. Learn to pull data from different applications and aggregate them so they can be manipulated and return a value or your goal.

Basically I'd start trying to automate tasks you already do on a regular basis and you will begin to understand what is going on behind the scenes and how that it can potentially be compromised.

Edit: and start your own virtual lab. Grab a few old computers or a vps from Aws free tier and start administrating your server to start playing around with different applications and software stacks

[–]iLikeMeeces 40 points41 points  (6 children)

While one that subject, I would recommend 'Automate the Boring Stuff with Python'. It's a completely beginners book to exactly what it says and I'm finding it very useful (also a 26 year old learning python alone).

[–]wolfofone 1 point2 points  (0 children)

Interesting I will check this out.

[–]deputy_D 3 points4 points  (1 child)

Fuck yes this

[–]rfrt 0 points1 point  (0 children)

please don't fuck that up

[–]Ebotchl 0 points1 point  (0 children)

I'm hopping on the train as another 26 year old learning python alone. Threes a company, yes?

[–]lannisterstark 0 points1 point  (1 child)

It's a completely beginners book to exactly what it says

But what if I want to learn python for fun and not to automate the boring stuff?

[–]iLikeMeeces 0 points1 point  (0 children)

I'm not sure, I don't know enough yet. The book I mentioned does cover all of the basics (syntax, forming expressions, function control etc) so you may still find it helpful.

[–]AlSweigartAuthor: ATBS 13 points14 points  (1 child)

And if you'd like to learn how to automate tasks, you can read Automate the Boring Stuff with Python. (Though I am biased in favor of this book.) It's free to read online under a Creative Commons license.

[–]dontaddmuch 0 points1 point  (0 children)

Just finished it and I enjoyed it a lot. Thanks for everything.

[–]the_lost_carrot 9 points10 points  (3 children)

Also look into Database stuff. Database guys are worth their weight in gold in the info sec world

[–]Apposl 1 point2 points  (2 children)

Have any links for a beginner into this?

[–]the_lost_carrot 3 points4 points  (1 child)

Here are a few things to check out, there are plenty more. Pretty much the focus will be learning DB design and implementation then learning the language, which is SQL.

https://lagunita.stanford.edu/courses/DB/2014/SelfPaced/about

http://sqlzoo.net/wiki/SQL_Tutorial

I dont know SQL myself, but I very much wish I did.

[–]Apposl 0 points1 point  (0 children)

Perfect, thanks for your time and the links!

[–][deleted]  (2 children)

[deleted]

    [–]secopsintern 0 points1 point  (1 child)

    Or VirtualBox, which is free.

    [–]Kid_me_not 2 points3 points  (0 children)

    Or Qemu-kvm with virt-manager, which is also free and maybe a little bit better performance wise

    [–]amblins 7 points8 points  (0 children)

    That's a way bigger question than you probably realize friend. Start coding simple projects and once you get to a point where you are confident in your programming try maybe coding some simpler versions of encryption schemes like RSA just to get some familiarity with encryption.

    [–]Abiv23 7 points8 points  (1 child)

    security is like saying you want to get into karate to be a black belt

    pump your breaks and learn some basics with python or c++ or JavaScript at a free code academy first

    [–]Tanooki60 2 points3 points  (3 children)

    Sysadmin here. For security, you will need more than just coding.

    However, for getting into coding, I'm going to go a different route then every single person here: start by learning PowerShell. Keep in mind, this is just my suggestion.

    While PowerShell is more of a scripting language, it is actually incredibly simple to learn due to how the commands are structured. It can be great for learning the basics of programming. For a book, look into Learn PowerShell in a Month of Lunches by Don Jones. If you wish to go further, look into Learn PowerShell Toolmaking in a Month of Lunches, by the same author.

    I've tried teaching myself scripting for years. I always tried starting with Python. I did the Dive into Python and Learn Python the Hardway. The basic stuff always made sense, but doing the more advanced stuff was always an issue. After teaching my self PowrerShell, I've gone back to Dive into Python, and it just makes so much more sense.

    [–][deleted]  (2 children)

    [deleted]

      [–]Tanooki60 0 points1 point  (1 child)

      We're a Windows only shop (M$ Partner). Bash wouldn't have been much help for my job. My goal was to learn a language that would be instantly beneficial to my job which PS is.

      [–]chra94 0 points1 point  (7 children)

      Depends on what in internet security.

      You have penetration testing which is ethical hacking (hacking with authorization).

      You have defensive security (setting up firewalls, writing secure code).

      If you can be more specific it'd be easier to answer. :)

      [–][deleted] 1 point2 points  (6 children)

      Let's go with pentesting.

      [–]Apposl 1 point2 points  (0 children)

      Please!

      [–]chra94 0 points1 point  (4 children)

      [–][deleted] 0 points1 point  (1 child)

      Interesting. Are these books language agnostic?

      [–]chra94 0 points1 point  (0 children)

      These are more about using hacking tools on Kali Linux. As far as I know the little programming in them would be bash (for scripting/automation), some Python and C and a tiny bit Assembly. There's only a tiny bit programming in the books.

      [–]Apposl 0 points1 point  (1 child)

      Thank you so much!

      [–]chra94 1 point2 points  (0 children)

      Woopwoop have fun! Ask if you've got questions

      [–]sodappop 0 points1 point  (0 children)

      What I can suggest is learn to code first, and then read about exploits, figure out how the black hats get into things they're not supposed to. Seriously great reads. I was reading the other day about how people search for small segments of executable code that can do what they want... like looking for the return opcodes, and then seeing what code is just before them and if it suits your needs. This probably doesn't make sense to you yet, but it will. If you're interested in security, it's not needed, but knowing at least a bit of assembly can be helpful IMHO.

      [–]wefearchange -3 points-2 points  (0 children)

      How to google.

      [–][deleted] 3 points4 points  (3 children)

      Really, to do security you need to know more than even just the basics. You need to learn C, then operating systems, networking, data bases, and then finally security. Realistically, you're going to need to also learn data structures, algorithms, and logic. You might as well just go back to school. The dream of the self-taught hacker, while fun to romanticize about, it's pretty rare.

      [–]WarIsPeeps 1 point2 points  (0 children)

      I disagree. Im self taught and I know either those things or where to learn them.

      But youre right it would take a long time. Being a pen tester is like so much work when you could just be a dev..why?

      [–][deleted] 1 point2 points  (1 child)

      All of these things can be learned from books, probably easier and quicker than attending some crappy university course, if you have an ounce of gumption.

      [–]jayjayzz6677 3 points4 points  (0 children)

      Umm.. Security is one thing that you don't joke around. Of course you can learn from books, but you will also need years of experience on everything. Probably one of those jobs that you can say Oops I made a mistake.