Folder Backup Automation in Batch Scripting | Automatically Backup Any Folder

Backing up important folders is one of the most common tasks performed by IT Support Engineers and System Administrators. Instead of copying files manually every day, you can automate the process with a simple Batch Script.

In this tutorial, we'll create a Folder Backup Automation script that copies a selected folder to a backup location automatically.

Batch Script

@echo off

set SourceFolder=C:\Users\%USERNAME%\Documents

set BackupFolder=D:\Backup

if not exist "%BackupFolder%" (
    mkdir "%BackupFolder%"
)

xcopy "%SourceFolder%" "%BackupFolder%\Documents" /E /I /Y

echo.
echo Folder Backup Completed Successfully.

pause

How the Script Works

#Step 1: Turn Off Command Display

@echo off

This hides the commands while the script runs, making the output cleaner.


#Step 2: Set the Source Folder

• set SourceFolder=C:\Users\%USERNAME%\Documents

The variable `SourceFolder` stores the folder you want to back up.

The `%USERNAME%` environment variable automatically inserts the name of the currently logged-in Windows user.



#Step 3: Set the Backup Location

• set BackupFolder=D:\Backup

This defines where the backup will be stored.

You can change this location to another drive or folder if needed.



#Step 4: Create the Backup Folder

if not exist "%BackupFolder%" (
    mkdir "%BackupFolder%"
)


If the backup folder doesn't already exist, the script creates it automatically.


#Step 5: Copy the Files

xcopy "%SourceFolder%" "%BackupFolder%\Documents" /E /I /Y

The `xcopy` command copies all files and folders.

#XCOPY Options

| Option | Description                                 |
|  | - |
| `/E`   | Copies all folders, including empty folders |
| `/I`   | Creates the destination folder if needed    |
| `/Y`   | Overwrites existing files without asking    |



#Step 6: Display Success Message
echo Folder Backup Completed Successfully.


This informs the user that the backup process has completed.


#Step 7: Pause the Script
pause


Keeps the Command Prompt window open until a key is pressed.

Sample Output

Folder Backup Completed Successfully.

Press any key to continue . . .

Why Automate Folder Backups?

Automating backups helps you:

• * Protect important files
• * Save time
• * Reduce manual work
• * Minimize the risk of data loss
• * Keep regular backups without repeating the same steps

Real-World Uses


IT Support Engineers and System Administrators commonly use folder backup scripts to:

* Backup user Documents before Windows reinstallation
* Copy project files to another drive
* Protect company data
* Create backups before software upgrades
* Automate daily maintenance tasks

Customize the Script

You can back up other folders by changing the `SourceFolder` variable.

Examples:

Desktop
C:\Users\%USERNAME%\Desktop


Downloads
C:\Users\%USERNAME%\Downloads


Pictures
C:\Users\%USERNAME%\Pictures


You can also change the destination folder to another drive, external USB device, or network location if accessible.

Commands Used

Interview Questions

#What does `xcopy` do?

• It copies files and folders from one location to another.

#Why is `if not exist` used?

• It checks whether the destination folder exists before creating it.

#What does `%USERNAME%` represent?

• It stores the name of the currently logged-in Windows user.

#What is the purpose of `/E` in `xcopy`?

• It copies all folders, including empty ones.

#Why should folder backups be automated?

• Automation saves time, reduces manual effort, and helps protect important data.

Conclusion

Folder Backup Automation is a practical Batch Scripting project that demonstrates how to automate one of the most common Windows administration tasks. By combining variables, folder checks, and the `xcopy` command, you can create a reliable backup solution for personal or professional use.

If you're preparing for an IT Support Engineer, Desktop Support Engineer, or System Engineer role, this project showcases your ability to automate routine maintenance tasks and is a valuable addition to your Batch Scripting portfolio.
 

IT Support Toolkit in Batch Scripting | Build Your Own Windows Troubleshooting Tool

IT Support Engineers perform many repetitive tasks every day, such as checking system information, troubleshooting network issues, opening Windows tools, and cleaning temporary files. Instead of running each command manually, you can automate these tasks using a single Batch Script.

In this tutorial, we'll build a simple **IT Support Toolkit** in Batch Scripting that displays a menu and lets you choose common troubleshooting tasks.

Batch Script

@echo off
title IT Support Toolkit
color 0A

:menu
cls
echo =====================================
echo         IT SUPPORT TOOLKIT
echo =====================================
echo.
echo 1. System Information
echo 2. Network Information
echo 3. Ping Test
echo 4. Flush DNS Cache
echo 5. Open Device Manager
echo 6. Open Task Manager
echo 7. Open Event Viewer
echo 8. Clean Temp Files
echo 9. Exit
echo.

set /p choice=Select an option (1-9): 

if "%choice%"=="1" goto systeminfo
if "%choice%"=="2" goto network
if "%choice%"=="3" goto pingtest
if "%choice%"=="4" goto flushdns
if "%choice%"=="5" goto devicemanager
if "%choice%"=="6" goto taskmanager
if "%choice%"=="7" goto eventviewer
if "%choice%"=="8" goto cleantemp
if "%choice%"=="9" exit

echo Invalid choice!
pause
goto menu

:systeminfo
systeminfo
pause
goto menu

:network
ipconfig
pause
goto menu

:pingtest
ping google.com
pause
goto menu

:flushdns
ipconfig /flushdns
pause
goto menu

:devicemanager
start devmgmt.msc
goto menu

:taskmanager
start taskmgr
goto menu

:eventviewer
start eventvwr.msc
goto menu

:cleantemp
del /q /f /s "%temp%\*.*"
echo Temporary files cleaned successfully.
pause
goto menu

How the Script Works

Step 1: Display the Main Menu

The script starts by displaying a menu with different troubleshooting options.

• 1. System Information
• 2. Network Information
• 3. Ping Test
• 4. Flush DNS Cache
• 5. Open Device Manager
• 6. Open Task Manager
• 7. Open Event Viewer
• 8. Clean Temp Files
• 9. Exit

The user enters a number to choose the required task.


Step 2: Read User Input

• set /p choice=Select an option (1-9):

The selected option is stored in the variable `choice`.


Step 3: Execute the Selected Task

The script uses IF statements to jump to the appropriate section.

Example:

if "%choice%"=="1" goto systeminfo
If the user enters **1**, the script displays detailed system information.

Features Included

1. System Information

• systeminfo

Displays:

• * Windows version
• * Computer name
• * BIOS information
• * Installed memory
• * System boot time

2. Network Information

• ipconfig

Shows:

• * IP Address
• * Default Gateway
• * Subnet Mask
• * Network Adapter Details

3. Internet Connectivity Test

• ping google.com

Checks whether the computer can reach the internet.


4. Flush DNS Cache

• ipconfig /flushdns

Clears the local DNS cache, which can help resolve certain website or name resolution issues.



5. Open Device Manager

• start devmgmt.msc

Launches Windows Device Manager.


6. Open Task Manager

• start taskmgr

Opens Task Manager to view running processes and system performance.



7. Open Event Viewer

• start eventvwr.msc

Launches Event Viewer to review Windows logs and errors.


8. Clean Temporary Files

• del /q /f /s "%temp%\*.*"

Deletes temporary files from the current user's Temp folder.

Why Build an IT Support Toolkit?

Creating a toolkit provides several benefits:

• * Saves time during troubleshooting
• * Combines multiple utilities into one script
• * Reduces repetitive work
• * Improves productivity
• * Makes common administrative tasks easily accessible

Real-World Uses

IT Support Engineers and System Administrators use similar toolkits to:

• * Diagnose user issues
• * Collect system information
• * Check network connectivity
• * Troubleshoot Windows problems
• * Perform routine maintenance
• * Speed up daily support tasks

Interview Questions

What is an IT Support Toolkit?

• It is a collection of scripts or tools that automate common troubleshooting and administrative tasks.

Which command displays system information?

• systeminfo

Which command checks internet connectivity?

• ping

What does `ipconfig /flushdns` do?

• It clears the DNS resolver cache stored on the local computer.

Why should IT professionals automate repetitive tasks?

• Automation improves efficiency, reduces manual effort, and minimizes the chance of human error.

Conclusion

An IT Support Toolkit is one of the most practical Batch Scripting projects for beginners. It combines multiple Windows commands into a single, menu-driven application that simplifies troubleshooting and routine maintenance.

If you're preparing for roles such as **IT Support Engineer**, **Desktop Support Engineer**, **Help Desk Engineer**, or **System Engineer**, this project demonstrates your understanding of Windows administration and automation. It's also an excellent addition to your GitHub repository and technical portfolio.

Network Troubleshooting Tool in Batch Scripting | Automate Basic Network Diagnostics

Network issues are among the most common problems faced by IT Support Engineers and System Administrators. Instead of running multiple commands manually, you can create a simple Batch Script that gathers important network information in one place.

In this tutorial, we'll build a **Network Troubleshooting Tool** using Batch Scripting.

Batch Script

How the Script Works

# Step 1: Display a Heading

• echo ===== NETWORK INFORMATION =====

This makes the output easier to read and identifies the purpose of the script.



# Step 2: Display IP Configuration

• ipconfig

The ipconfig command shows:

• * IP Address
• * Subnet Mask
• * Default Gateway
• * Network Adapter Details

Example:

• IPv4 Address . . . . . . : 192.168.1.10
• Default Gateway . . . . : 192.168.1.1

# Step 3: Test Internet Connectivity

• ping google.com

The ping command checks whether your system can communicate with another device or website.

Successful result:

• Reply from 142.250.xx.xx

Failed result:

Request timed out.



# Step 4: Check DNS Resolution

• nslookup google.com

The nslookup command verifies whether DNS is resolving domain names correctly.

Example:

• Name: google.com
• Address: 142.250.xx.xx

This helps identify DNS-related issues.


# Step 5: Trace the Network Path

tracert google.com


The tracert command shows the path packets take to reach a destination.

This is useful when:

• * Websites are slow
• * Connections are dropping
• * Network routes need troubleshooting

# Step 6: Keep the Window Open

pause


This allows you to review the results before the Command Prompt window closes.

Sample Output

===== NETWORK INFORMATION =====

• Windows IP Configuration
• Reply from google.com
• DNS Lookup Successful
• Tracing route to google.com

Why Use a Network Troubleshooting Tool?

Instead of running commands individually, this script:

• * Saves time
• * Collects diagnostic information quickly
• * Simplifies troubleshooting
• * Helps identify common network issues

Real-World Uses

IT Support Engineers and System Engineers use similar scripts to:

• * Verify internet connectivity
• * Check DNS resolution
• * Troubleshoot user network complaints
• * Collect diagnostic information
• * Perform initial network health checks

This type of script is especially useful during Help Desk and Desktop Support operations.

Common Commands Used

Interview Questions

# What does ipconfig do?

• It displays network configuration details such as IP address, subnet mask, and default gateway.

# What is the purpose of ping?

• It checks whether a device or website is reachable over the network.

# Why is nslookup used?

• It verifies whether DNS is resolving domain names correctly.

# What does tracert do?

• It displays the path packets take to reach a destination.

# Why should network diagnostics be automated?

• Automation saves time and helps troubleshoot issues more efficiently.

Conclusion

A Network Troubleshooting Tool is a practical Batch Scripting project that combines several important networking commands into a single script. By using ipconfig, ping, nslookup, and tracert, you can quickly gather information needed to diagnose common network problems.

For aspiring IT Support Engineers, System Administrators, and future System Engineers, this is an excellent project to practice and add to your scripting portfolio.
 

NETREAPER – A Modern Offensive Security Toolkit That Simplifies Penetration Testing

Penetration testing usually involves jumping between dozens of tools, each with different commands, flags, and workflows. NETREAPER is a new offensive security toolkit created to solve this problem by bringing more than 70 essential pentesting utilities into one organized and easy-to-use command-line interface.

Instead of switching terminals, searching for syntax, or manually launching each tool, NETREAPER provides a structured, menu-driven workflow that streamlines the entire assessment process.

Why NETREAPER Stands Out

NETREAPER is designed for efficiency. It removes the usual clutter encountered during security testing and gives attackers (and defenders) a single, unified environment. Its interface offers clear menus, guided prompts, and categorized sections that make navigation fast and intuitive—even for beginners.

The toolkit integrates popular utilities from various domains such as reconnaissance, wireless attacks, exploitation, credential cracking, OSINT, and post-exploitation. Everything is neatly grouped, so a task that typically needs multiple tools can now be performed from one dashboard.

Key Capabilities of NETREAPER

1. Unified Interface

NETREAPER wraps more than 70 industry-standard security tools into a single interface, eliminating the need to memorize complex command options for each tool.

2. Organized Menu System

The toolkit separates operations into clearly defined categories, including:

• Reconnaissance
• Wireless testing
• Exploitation
• Credential attacks
• Stress testing
• OSINT/Intel gathering
• Post-exploitation
• Utility functions

This structure makes it easier to perform tasks without getting overwhelmed.

3. Recon & Network Analysis

Users can run detailed scans, DNS lookups, ARP discoveries, SSL/TLS analysis, and more through tools such as:

• Nmap
• Masscan
• Dnsenum

4. Wireless Security Assessment

NETREAPER supports a wide range of wireless attacks, including:

• WPA/WPA2 handshake capture
• Deauthentication
• Packet sniffing
• WPS exploitation
• Evil Twin AP attacks
• Tools like aircrack-ng, bettercap, and wifite are already integrated.

5. Exploitation Frameworks

It provides access to popular exploitation engines:

• Metasploit
• SQL injection frameworks
• Web vulnerability scanners
• Directory brute-forcing utilities

6. Credential Attacks

Various password-cracking and brute-force options are included through:

• Hashcat
• Hydra
• John the Ripper
• SMB/WinRM attack modules

7. Stress & Load Testing

NETREAPER can simulate network pressure through packet flooding, bandwidth testing, or HTTP load generation using tools like hping3 and iperf3.

 

8. OSINT & Intelligence Gathering

The toolkit enables reconnaissance across the public internet with utilities for:

• Passive information gathering
• Shodan-like scanning
• Traffic inspection
• Data harvesting from open sources

9. Post-Exploitation Support

It includes resources and guidance for:

• Privilege escalation
• Lateral movement
• Persistence mechanisms
• System enumeration

10. Session Management & Reporting

One of the standout features in NETREAPER is session tracking.
Users can:

• Start and pause assessments
• Resume previous sessions
• Generate structured, compliance-ready reports
• This is especially valuable for professional penetration testers.

Github Link - https://github.com/Nerds489/NETREAPER 

User Experience and Safety Features

NETREAPER prioritizes usability through guided wizards, progress indicators, helpful reminders, and optional verbose modes.

To keep operations safe and compliant, it includes:

• Input validation
• Target confirmation prompts
• Privilege escalation checks
• Logging and audit trails
• These safeguards help prevent accidental misuse.

Installation Options

Users can choose between:

Essential Install (~500MB): Fast setup with core tools

Full Arsenal (3–5GB): Complete environment with the entire toolkit

Setup usually takes between 5 to 30 minutes depending on system resources.

 

Who Benefits from NETREAPER?

• Red Teamers: Gain a centralized platform for offensive operations
• Blue Teamers: Understand attacker workflows in depth
• Students & Beginners: Learn penetration testing through guided menus
• Security Firms: Use consistent logs and reporting for audits

NETREAPER offers an efficient, organized, and user-friendly offensive security environment suitable for all skill levels.
 

Disclaimer

Hashcat is a password cracker used to crack password hashes. A hash is a one-way function that takes a word or string of words and turns them into a fixed length of random characters. This is a much more secure method of storing passwords rather than storing them in plain text. It is not reversible.


Hashcat attempts to crack these passwords by guessing a password, hashing it, and then comparing the resulting hash to the one it’s trying to crack.


Hash Analyzer Tunnelsup.com Hash Analyser allows you to stick a hash into there site and will give you there best guess at what the hash is. This was all i used for the Crack the hash challenge and was pretty much spot on until some of the later tasks.


Hash-Identifier can be found pre-installed in Kali Linux and will tell you the possible hashing algorithm for the hash you enter. The Nice thing about this other then it already being installed in kali is that it gives you a few alternatives which can help finding finding the right mode in hashcat.


HashID This is a python based hash identifying tool which needs to be downloaded from there GitHub Repo. The cool thing about this tool is not only does it identify the hashes but also can give you the corresponding hashcat mode as part of the output.


 

hashcat -h | grep sha256
hashcat -h | grep md5
hashcat -h | grep salt
hashcat -h | grep sha
hashcat --help

In this lab, we will create a set of hashes and then use a dictionary to crack these hashes. The first step is to create the hashes. Open a terminal and use the following command to create a new txt document filled with some hashes: 

echo "dc647eb65e6711e155375218212b3964
eb61eead90e3b899c6bcbe27ac581660
958152288f2d2303ae045cffc43a02cd
2c9341ca4cf3d87b9e4eb905d6a3ec45
75b71aa6842e450f12aca00fdf54c51d
031cbcccd3ba6bd4d1556330995b8d08
b5af0b804ff7238bce48adef1e0c213f" > target-hashes.txt

These hashes comprise 7 different password which we will attempt to crack.

The next step is to choose the wordlist we will use for cracking the hashes. We will be using the “rockyou.txt” file. Type the following to locate the file:

locate rockyou.txt

Navigate back to the home directory by typing cd. We are now ready to begin the attack.

We will use the following command to crack the password hashes:

hashcat -m 0 -a 0 -o cracked.txt target-hashes.txt /home/hackerboy/Dcouments/rockyou.txt


Let’s break down each of these options.


# The -m 0 option tells hashcat that we are attempting to crack MD5 hash types
# The -a 0 option tells hashcat we are using a dictionary attack
# The -o cracked.txt option is creating the output file for the cracked passwords
# The target_hashes.txt is the file containing the hashes
# The /home/hackerboy/Dcouments/rockyou.txt is the wordlist we will use for this dictionary attack

 

If you want to more cracking hashes, follow below the article on TryHackMe Cracking Hashes.

Click Here 

Disclaimer

 

All tutorials are for informational and educational purposes only and have been made using our own routers, servers, websites and other vulnerable free resources. we do not contain any illegal activity. We believe that ethical hacking, information security and cyber security should be familiar subjects to anyone using digital information and computers. Hacking Truth is against misuse of the information and we strongly suggest against it. Please regard the word hacking as ethical hacking or penetration testing every time this word is used. We do not promote, encourage, support or excite any illegal activity or hacking.

Intercept client-side requests 

Burp Suite, a framework of web application pentesting tools, is widely regarded as the de facto tool to use when performing web app testing. Throughout this room, we'll take a look at the basics of installing and using this tool as well as it's various major components. Reference links to the associated documentation per section have been provided at the bottom of most tasks throughout this room. full tutorial of burp suite

we will learn how to use Burp to intercept browser network traffic.

Once the web browser opens, navigate to the following site:

http://testasp.vulnweb.com/Login.asp?RetURL=%2FDefault%2Easp%3F

 

Once there, go back to Burp and turn ON intercept mode. Then, enter any username and password combination into the site and click “Login”. As you will see, the page will remain in a loading state. This is because Burp has now intercepted the request we sent to the server, and is holding it for us to manipulate.

Now, we will start FoxyProxy in our browser.

Go back to Burp and you will find the intercepted request, along with the username and password data that we entered. To navigate through the different requests Burp is intercepting, simply press the “Forward” button to send the request to the server and view the next request.

Full Tutorial of Burp Suite

  to you by Hacking Truth

Disclaimer

 

All tutorials are for informational and educational purposes only and have been made using our own routers, servers, websites and other vulnerable free resources. we do not contain any illegal activity. We believe that ethical hacking, information security and cyber security should be familiar subjects to anyone using digital information and computers. Hacking Truth is against misuse of the information and we strongly suggest against it. Please regard the word hacking as ethical hacking or penetration testing every time this word is used. We do not promote, encourage, support or excite any illegal activity or hacking.

ARP Poisoning is a protocol that associates a given IP Address with the Link Layer address of the relevant physical machine. Since IPv4 is still the most commonly used internet protocol. ARP generally bridges the gap between 32 bit IPv4 address and 48 bit mac addresses. It works in both direction. ARP Poisoning Attack to defend

ARP is a stateless protocol that is used within a broadcast domain to ensure the communication by resolving the IP address to MAC address maping. The relationship between a given MAC address and its IP address in kept in  a table known as the ARP cache. ARP protocol ensure the binding of IP address and mac address. By borad casting the ARP request with IP addresses, the switch can learn the associated MAC Address information form the reply of the specific host.

In the event that there is a no map or the map is unknown, the source will send a  broadcast to all nodes just the node with a coordinating MAC address for that IP will answer to the demand with the packet that involves the MAC address mapping. The switch will learn the MAC address and its connected port information into its fixed length CAM table.

As shown in the figure, the source generates the ARP query by broadcasting the ARP packet, A node  having the MAC address, the query is destined for will reply only to the packet. The frames  is floaded out all ports (other than the port on which the frame was received). If CAM table entries are full this also happen when the destination MAC Address in the frame is the broadcast address. MAC flooding technique is used to turn a switch into a hub in which switch starts broadcasting each and every packet. In the scenario,  each user can catch the packet even those packets which is not intende.

ARP Code Poisoning

Defend ARP Poisoning Attack

Disclaimer

 

All tutorials are for informational and educational purposes only and have been made using our own routers, servers, websites and other vulnerable free resources. we do not contain any illegal activity. We believe that ethical hacking, information security and cyber security should be familiar subjects to anyone using digital information and computers. Hacking Truth is against misuse of the information and we strongly suggest against it. Please regard the word hacking as ethical hacking or penetration testing every time this word is used. We do not promote, encourage, support or excite any illegal activity or hacking.

LDAP Enumeration

LDAP stands for light weight directory access protocol and it is an internet protocol for accessing disturbed directory services like active directory or openLDAP etc. A directory service is a hirerchical and logical structure for storing records of users. LDAP is based on client and server transmitted b/w client and server using basic encoding rules (BER).


LDAP Enumeration - LDAP  supports anonymous remote query on the server. The query will disclose sensitive information such as username, address, contact details, department details etc.

LDAP Enumeration Tools

The following table shows the list of tools to perform LDAP enumeration.

1) Softerra LDAP

http://www.idapadministrator.com/


2) Jxplorer

http://jsxplorer.org/


3) Active directory domain services management pack for system center

https://www.microsoft.com/en-in/download/details.aspx?id=21357


4) LDAP Admin Tool

http://www.idapadmin.org/


5) LDAP adminstrator tool

https://sourceforge.netprojects/idapadmin/

LDAP Security Controls

The following are the security controls to prevent LDAP enumeration attacks.

# Use SSL to encrypt LDAP communication.

# Use kerberos to restrict the access to known users.

# Enable account lockout to restrict brute forcing.

Disclaimer

 

All tutorials are for informational and educational purposes only and have been made using our own routers, servers, websites and other vulnerable free resources. we do not contain any illegal activity. We believe that ethical hacking, information security and cyber security should be familiar subjects to anyone using digital information and computers. Hacking Truth is against misuse of the information and we strongly suggest against it. Please regard the word hacking as ethical hacking or penetration testing every time this word is used. We do not promote, encourage, support or excite any illegal activity or hacking.
 

NetBIOS  Enumeration

NetBIOS stands for network basic input output system. IBM developed it along with sytek. The primary intention of NetBIOS was developed as application programming interfae (API) to enable access to LAN resources by the client's software.

NetBIOS naming convention start with 16-ASCII character string used to identify the network devices over TCP/IP. 15 characters are used for the device name and the 16 characters is reserved for the service or name record type.

NetBIOS enumeration explained

NetBIOS software runs on PORT 139 on windows operating system file and printer service needs to be enabled to enumerate NetBIOS over windows operating system.

An attacker can perform the below on the remote machine.


1) Choose to read or write to a remote machine depending on the availability of shares.
2) Launch a Denial of Service (DOS) attack on the remote machine.
3) Enumerate password policies on the remote machine.

NetBIOS Enumeration Tools

The following tables shows the list of toolls to perform NetBIOS Enumeration.

Name of the tools and web links.

1) Nbstat - www.technet.microsoft.com

2) Superscan - https://www.mcafe.com/in/downloads/free-tools/superscan.aspx

3) Hyena - http://www.systemtools.com/hyena

4) winfingerprint - http://packetstormsercurity.com/files/38356/winfingerprint-0.6.2.zip.html

NetBIOS security controls 

The following are the security controls to prevent NetBIOS enumeration attacks.

# Minimize the attack surface by minimizing the unnecessary service like server message block (SMB).

# Remove file and printer sharing in windows OS.

Disclaimer

All tutorials are for informational and educational purposes only and have been made using our own routers, servers, websites and other vulnerable free resources. we do not contain any illegal activity. We believe that ethical hacking, information security and cyber security should be familiar subjects to anyone using digital information and computers. Hacking Truth is against misuse of the information and we strongly suggest against it. Please regard the word hacking as ethical hacking or penetration testing every time this word is used. We do not promote, encourage, support or excite any illegal activity or hacking.

Can i learn hacking on my own ?

Yes, if you follow these rules :

Be a problem solver

First, you have to be a problem sovler instead of complaining about it, like you face a computer error will try to setup something than fix it on you own by googling or youtube. This improves your knowledge about how things work and its very important for a hacker.

Join Community of Hacker

Yes, you have to join a community of like minded people so you can see what actually happening in the technical world and you can discuss your doubts and also help others with their problems and indirectly it improves your skills and knowledge.

Save Bookmark of Hacking Blogs

Find at least 3 website that post tutorials or guides about pen-testing, computer tricks, smartphone tricks, etc. So, you will learn the latest things which newly discovered or developed.

Find a problem then fix it

This technical world is full of problems, daily people face many problems and its oportunity for hackers or technical experts by finding their solutions and become famous or increase your value. It helps you give motivation for your journey and you start thinking out of the box.

Disclaimer

Make money legally as a Hacker

It's okay if you don't have college degree

Without a college degree you can make money as a hacker and you won't get arrested for it. Even this is possible you are just in your first year and you are already earning a good lumpsum of money. It's just matter of effort
you execute over things.

You don't need certificate to earn money, you'll just need skills to earn money!

Teaching cyber security

Teaching hacking is one of the most easy may to make money with the help of your skills, even the best hackers of
world still write books related to hacking.


Writing articles on cyber security, helping others with tutorial videos and ebooks will helo you out in earning.

If you are an undergraduate, don't go for making tutorials, you can sell your skill in your campus.

Bug Bounty Programs

Companies are on the rise looking to reward ethical hackers who notify them of any bug in their software before it could be exploited by malicious hackers.

Become a bug bounty hunter, no legislation is against it, you make money when you win it. Any no company will ask for your certificate, all they need are your fingers on those keys.

Write Software securities

The government won't blame you making money writing software securities that abort malicious attacks. Instead, you will get some accolades for that.

 

Disclaimer

Killer website for hackers

Exploit Database

Exploit database (ExploitDB) is an archive of exploits for the purpose of public security, and it explains what can be found on the database. The ExploitDB is a very useful resource for identifying possible weakness in your network and for staying up to date on current attacks occuring in other networks.

Shodan

Shodan works by requesting connections to every imaginable internet protocol (IP) address on the internet and indexing the information that it gets back from those connection requests. Shodan crawls the web for devices using a global network of computers and servers that are running 24/7.

Archive org

Intenet Archive is a non-profit library of millions of free books, Movies, software, music, websites, and more.

Nmmapper

Pentest tool from nmap online to subdomain finder, theHarvester, wappalyzer. Discover dns records of domains, detect cms using cmseek & whatweb.

Builtwith

Builtwith is a website profiler, lead generation, competitive analysis and business intelligence tool providing technology adoption, ecommerce data and usage analytics for the internet.

Disclaimer

 
 
All tutorials are for informational and educational purposes only and have been made using our own routers, servers, websites and other vulnerable free resources. we do not contain any illegal activity. We believe that ethical hacking, information security and cyber security should be familiar subjects to anyone using digital information and computers. Hacking Truth is against misuse of the information and we strongly suggest against it. Please regard the word hacking as ethical hacking or penetration testing every time this word is used. We do not promote, encourage, support or excite any illegal activity or hacking.

Python Libraries that can automate your life

1) Openpxl

Automate excel reporting

Openpyxl is a python library that can help us automate our excel reporting. With openpyxl, we can read an Excel file, write excel formulas, make charts, and format a worksheet using python.


Installation

• pip install openpyxl

2) SMTPLIB

Email automation

smtplib is a built-in python module used for sending emails using the Simple Mail Transfer Protocol (SMTP).

• You dont need to install smtplib or email because thay come with python.

3) Camelot

Automate table extraction from

PDFs

These tables can be exported into a Pandas dataframe and other formats such as CSV, JSON, Excel, HTML, Markdown, and SQLite.

Installation

• pip install "camelot-py[base]"

4) Requests: Make Your Life Easier With an API

Automation sometimes involves working with an API. APIs can help you collect real-world data and also simplify the development process of an application.

To work with an API you need to send requests to a server and then read the responses. The message sent by a client to a server is known as an HTTP request.

With the Requests library, we can interact with an API by sending HTTP requests and accessing the response data. This library has useful features such as passing parameters in URLs, sending custom headers, form data, and more.
Installation

To install Requests, we only need to run the command below in our terminal.
 

• python -m pip install requests

Disclaimer