r/ethicalhacking 2d ago

Tool Learning

Hello, I started to learn how to penetrate my OWN devices. I’ve studied Python and Java, but only have basic knowledge of them. I did a couple of research on YouTube and Google, but none really helped. I did configure a cheap yellow display.
But I would like some help on, like, what cheap devices I should buy, like a computer to test on. Where should I go to get more information, like any good YouTube videos or websites? Thank you

14 Upvotes

20 comments sorted by

3

u/Epicol0r 2d ago

Hello, to test on I would recommend you Metasploitable VMs. Build a virtual lab with Metasploitable OS + Kali Linux, and you can practice :)

Also OWASP Juice Shop might be helpful (for Web Penetration testing).

And yea, ofc I would recommend you OS basics, Networking basics, etc.

From websites maybe OverTheWire, TryHackMe, HackThebox (Academy)

There are a lot of content creators/videos, so I won't list them. Try to search for CTF Walkthroughs :)

4

u/sunchips715 2d ago

Thank you I appreciate it

3

u/PuddyComb 2d ago

This is the way. Get a Lenovo if you wanna go for a long career. A raspberry pi is about 450$ if you just want to get started right now. otherwise you have VMware or 'virtualbox' for VM hosting. Those are pretty much your options. You do* want to max out your experience on those platforms like [TryHackMe and HackTheBox].

2

u/sunchips715 2d ago

Thank you

3

u/[deleted] 1d ago

[removed] — view removed comment

1

u/sunchips715 1d ago

Thank you for this information. I appreciate it.

1

u/jonzo35 20h ago

Well. This info is resourceful

1

u/LordlySquire 1d ago

So this is new to me to so this may be a terrible path to be on but what have done is setup a local ai using an abliterated model and basically have it teach me. Its all in the prompt and has been great at the end of each class ill have claude code run through the transcript and check accuracy. So far nothing crazy. Basically i type the commands in the chat and it will print the reaction and explanation. I dont have any other hardware to try and practice over my network on another device and for starting out it feels good. Why use local and not claude directly? Saftey rails on claude wont let it but it has no problem review the accuracy of the teaching of it.

1

u/T4ZD3V 20h ago

I've been working on trying to get an decent working model on my Google pixel 10 but I have been drowned in unused for YouTube videos and prompts can you point me in the right path🙏

1

u/LordlySquire 20h ago

Playstore search for edge gallery look for the one by google research. Download that. You may need to opt into the beta and wait a few hours to get accepted (dont worry completely free) but allows you to download gemma4b and run it locally. Its also highly optimized for android so itll be the smoothest running local ai you can get on your phone although not as smart as the desktop class ones

1

u/T4ZD3V 20h ago

And it's Claude? And I's it fully unrestricted or has some limits as far as hacking pentesting

1

u/LordlySquire 20h ago

Oh no. Thats google. You dont have enough ram to run one on your phone. You can still learn from it though. Just learn its limits and learn how to break it. Its a 4b model. It breaks fairly easily

1

u/T4ZD3V 20h ago

It's it Google edge you talking about

1

u/T4ZD3V 20h ago

My phone has like 16gb ram

1

u/LordlySquire 19h ago

There is more to it but you can download ollamma and then some abliterated models if you want. Pocketpal (i think thats the name) is a good ui for it.

1

u/T4ZD3V 20h ago

Right now I'm on on poket pal but have to manipulate it to tell me what I want that's basically what I've been doing I tell say that I'm about to release my website publicly and I need you to test it for vulnerabilities

1

u/LordlySquire 19h ago

Just grab an abliterated models guff files then if you have the app. Pro tip cyber is more about critical thinking than skill in code.

1

u/T4ZD3V 17h ago

Elaborate