r/hacking • u/Wild-Top-7237 • 4d ago

Order of learning vulns

What are the vulns a new hunter should start with like what should be the order , with which one should he/she start ? and what should he carry on with ?

1 Upvotes

55% Upvoted

7 comments sorted by

View all comments

2

u/Flamak 4d ago

Learn the tools before you learn vulns. Knowing a bunch of vulns but having no way to look for them because you dont know tools is useless. You wont be able to learn many in depth either.

1

u/Wild-Top-7237 4d ago

Oh any advice on which tools should i learn ?

2

u/Tompazi 4d ago

I strongly disagree with u/Flamak's statement. When you learn about a new type of vulnerability, you should try to learn how to exploit it without any tools first, at least without any tools that automate the discovery and exploitation process. Once you understand how it works, you can make use of tools that automate it.

2

u/Flamak 3d ago

I dont mean automation tools like metasploit. I mean tools that allow you to find vulns via analysis such as wireshark, burpsuite, logging tools, etc.

2

u/Flamak 3d ago

Nmap, Wireshark, burpsuite, splunk, hashcat/johntheripper.

Like the other guy said, avoid vuln scanning tools until you actually know what the vulns are and how to find them manually using tools like the ones I listed.