Cyber attacks are in the news constantly, and businesses and individuals are looking for ways to protect themselves. That's where ethical hacking comes in. Ethical hackers, sometimes called white-hat hackers, use the same skills as criminals, but with permission, to find weaknesses before the bad guys do.
If you're curious about ethical hacking and want to learn the basics, this guide covers the key ideas, the tools, and how to get started safely and legally.
What is ethical hacking?
Ethical hacking means deliberately testing systems for weaknesses, with the owner's permission. The goal is to find and fix problems before criminals can exploit them.
Ethical hackers use the same techniques as malicious hackers. The difference is consent, and that's what makes the work legal.
Why it matters
- Preventing data breaches: finding weaknesses early protects customer data and saves organisations a fortune.
- Meeting regulations: many industries need regular security testing to comply with rules like UK GDPR and the PCI DSS card payment standard.
- Building trust: showing you take security seriously helps customers trust you.
Key ideas you'll come across
1. Penetration testing
A penetration test (pen test) is an authorised, simulated attack on a system to find weaknesses. There are three main styles:
- Black box: the tester starts with no inside knowledge, like an outside attacker.
- White box: the tester gets full details, such as network diagrams and source code, for a thorough review.
- Grey box: somewhere in between, for example the access a normal employee would have.
2. Vulnerability assessment
A vulnerability assessment is a systematic scan for known weaknesses, which are then ranked by how serious they are. Unlike a pen test, it doesn't try to actually exploit them. It's about finding and prioritising.
3. Social engineering
Social engineering means tricking people rather than computers. It's often the easiest way in, so ethical hackers test it too (with permission). Common tactics include:
- Phishing: fake emails or texts that trick people into handing over passwords or clicking malicious links.
- Pretexting: inventing a believable story ("Hi, it's IT support…") to get information.
- Baiting: leaving an infected USB stick lying around for someone to plug in out of curiosity.
Tools of the trade
These are the tools most beginners start with. Many come pre-installed on Kali Linux, a free distro built for security testing.
- Nmap: finds devices on a network and the ports and services they're running. Great for checking your own home network.
- Wireshark: captures and inspects network traffic packet by packet. I used it for my routing protocols dissertation.
- Metasploit: a framework for testing known vulnerabilities, with a huge library of exploits and helpers.
- Burp Suite: the go-to tool for testing websites and web apps, for problems like SQL injection and cross-site scripting. There's a free Community Edition.
- ZAP: a free, open-source web app scanner, formerly OWASP ZAP and now known as ZAP by Checkmarx.
How to get started
1. Learn networking basics
You can't break into what you don't understand. Get comfortable with:
- IP addresses and subnets (start with my IP addresses explained post)
- TCP/IP and common ports
- DNS, DHCP and how routers and firewalls work
2. Get comfortable with Linux
Most security tools are built for Linux, so learn your way around the command line. Run Kali or Ubuntu in a virtual machine so you can't break your main computer.
3. Learn some programming
It's not compulsory, but it helps a lot:
- Python for scripts and automation
- JavaScript for understanding and testing web apps
- Bash for automating Linux tasks
- C if you want to understand how software works at a low level
4. Practise legally
This is the fun part, and there are loads of safe, legal places to practise:
- TryHackMe: guided, beginner-friendly rooms in your browser
- Hack The Box: more challenging machines and labs
- OWASP Juice Shop: a deliberately vulnerable web shop you can run at home
- Your own home lab: a couple of virtual machines on your PC
5. Take courses and consider certification
Online platforms like Coursera, Udemy and Cybrary have ethical hacking courses. Certifications worth knowing about include:
- CompTIA Security+: a solid foundation in security concepts
- Certified Ethical Hacker (CEH): widely recognised, especially by HR departments
- OSCP from OffSec: a tough, hands-on exam where you hack into machines yourself
- CREST certifications: well respected for penetration testing roles in the UK
Best practice
- Always get written permission before testing anything you don't own, and agree exactly what's in scope.
- Document everything: what you tested, when, what you found and how to fix it.
- Stay up to date. New vulnerabilities appear every day, so follow security news and communities.
- Report responsibly. If you find a flaw, tell the owner privately and give them time to fix it.
Where ethical hackers work
- Banks and finance: constant testing to protect money and customer data
- Online shops: securing payment systems and customer accounts
- Government: protecting public services and sensitive information
- Healthcare: the NHS and other healthcare organisations are frequent targets, and patient data must be protected
- Security consultancies: testing other companies' systems as a service
The future of ethical hacking
As more of our lives move online, with smart devices, AI and cloud services everywhere, there are more weaknesses to find and the demand for ethical hackers keeps growing.
Wrapping up
Ethical hacking is challenging, rewarding and genuinely useful. Start with networking and Linux, practise on legal platforms, and always, always get permission. The world needs more people protecting systems than breaking them.
