The Kid Who Wants To Hack

课程概述

Two teenagers have arrived in this tutor's sessions wanting to learn attacking. One came out of a hacking community he found through a game. One wanted to specialise in malware. Neither of them was told off, and neither of them left. This segment is what they got instead. The argument is short. Defending is where the money is, offence without permission is where the arrest is, and the reason is not moral, it is economic. You will hear it in full in Module 1, with the specifics: what an ISP actually sees, what a honeypot is for, and what a criminal record does to a security career at the exact moment that career would have started paying. Then you build. A phishing-link scorer in Python that scores a URL on real signals — how old the domain is according to its registration record, whether it can even receive email, whether it publishes an SPF record, whether the characters in it have been swapped to imitate a brand, and whether the text of the link matches where the link actually goes. That project is not invented. It is a thirteen-year-old's own abandoned project, rebuilt properly, with the indicators he had missed. After that, evidence: what an attack looks like from the defender's chair, in lines of log, where the fact that matters is never one event but a pattern. And last, the legitimate version of what you wanted in the first place — bug bounty. Permission before anything. Scope, and what out of scope really costs you. Staging, never production. And a report, because a finding with no remediation hint is worth nothing to the company and nothing to you. You will finish with a working tool, a habit of reading logs for shape rather than for events, and one written vulnerability report. A note for parents. What is taught: reading public domain registration records, DNS lookups, writing a Python link scorer, reading authentication logs, listing the devices on your own home network, the law and ethics of permission, and how professional paid vulnerability research works. What is not taught, anywhere: how to attack anything. No exploitation steps, no malware, no remote access tools, no keyloggers, no phishing pages, no password cracking, no bypassing of any control. Attack techniques appear only as "here is what this leaves behind in a log, so you can catch it". Every practical exercise runs against the learner's own computer, their own home network, or a public service that explicitly invites testing, and that rule is written into every lab.

1. 01 The Honest Argument

   3 节课程·1h 17m

   Nobody here is going to tell you that curiosity is bad. The curiosity is the qualification. What changes in this module is the question you ask. "Does it work" is the wrong question. "Why does it…

2. 02 The Link Scorer

   3 节课程·1h 36m

   This project belonged to a thirteen-year-old before it belonged to you. His version asked a model whether a link looked dodgy. Yours checks facts. Garbage in, garbage out — a scorer fed a link nobody…

3. 03 Reading Evidence

   3 节课程·1h 27m

   One event tells you nothing. Four events with the wrong shape between them tell you everything. Every lesson in this module is the same skill: stop reading lines, start reading the pattern.

4. 04 Legitimate Hacking, Properly

   3 节课程·1h 36m

   Permission first, always. Respect scope. Never production, always staging. And a report without a remediation hint is worthless — you have told someone their house is on fire and walked off without…

常见问题

我将在 The Kid Who Wants To Hack 中学到什么？

You want to know how attacks work. Fine. This segment teaches you to see them — in a domain record, in a DNS lookup, in a log file — and to build a tool that scores a link before anyone clicks it. Nothing here teaches you to attack anything, and by the end you will understand why that is the expensi

我需要有先前的经验吗？

建议在开始 The Kid Who Wants To Hack 前具有一定的先前知识。

The Kid Who Wants To Hack 需要多长时间？

The Kid Who Wants To Hack 包含 4 个模块和 12 节课程。您可以按自己的速度学习。

我如何获得访问权限？

The Kid Who Wants To Hack 包含在任何付费订阅中。