# How to become a degenerate hacker... a beginner's guide Source: https://www.youtube.com/watch?v=Ukt2gVz25PQ Recap page: https://rapidrecap.app/video/Ukt2gVz25PQ Generated: 2026-02-05T17:23:24.977+00:00 --- ## Quick Overview The video concludes that ethical hacking requires using specialized tools like Nmap, Wireshark, Metasploit, HashCat, SkipFish, and SQLMap, all available on Kali Linux, while strongly cautioning viewers against using these tools for illegal activities like social engineering, DDoS attacks, or exploiting vulnerabilities without explicit consent, as such actions lead to severe legal consequences like imprisonment, emphasizing that the true lesson is to be the ethical actor, not the criminal. **Key Points:** - The video outlines ten essential, free, and open-source tools available by default on Kali Linux for ethical hacking and penetration testing. - The tools demonstrated include Nmap (for network scanning), Wireshark (for packet inspection), Metasploit (for exploitation), HashCat (for password cracking), SkipFish (for web vulnerability scanning), SQLMap (for SQL injection), AirCrack-Ng (for Wi-Fi cracking), Foremost (for file carving), John the Ripper, and the Social Engineering Toolkit (SET). - The demonstration shows Nmap scanning ports (80, 443, 8080) and OS detection, AirCrack-Ng cracking a WPA key ('biscotte'), and Foremost recovering files from a disk image. - A strong legal warning is issued against using these tools for illegal activities like social engineering scams (e.g., Nigerian prince scams, phishing PayPal logins) or launching DDoS attacks, citing real-world examples of hackers receiving long prison sentences (Guccifer: 4 years, Hamza Bendelladj: 15 years). - The video stresses the necessity of consent for penetration testing and highlights that insecure practices, like storing passwords in plaintext (as seen in a Reddit list), are easily exploited. - The creator explicitly recommends using Kali Linux, especially the desktop version via WSL on Windows, for learning these concepts ethically. ![Screenshot at 00:04: The video introduces the three archetypes of computer people: happy Users, distressed Programmers, and triumphant Hackers, setting a humorous tone for differentiating roles in the digital landscape.](https://ss.rapidrecap.app/screens/Ukt2gVz25PQ/00-00-04.jpg) **Context:** This video functions as a beginner's guide, framed humorously around the concept of becoming a 'degenerate hacker,' by showcasing ten powerful, open-source cybersecurity tools pre-installed on the Kali Linux distribution. The context is set by first contrasting the user types (Users, Programmers, Hackers) and then diving into the specific tools used for reconnaissance, packet sniffing, exploitation, and password cracking, while repeatedly warning against illegal use by showing satirical examples of cybercrime consequences. ## Detailed Analysis The video presents a list of ten powerful, free, and open-source tools available on Kali Linux for ethical hacking and penetration testing. It begins by categorizing computer users into Users (who just want to use software), Programmers (who build software but are often victims of exploits), and Hackers (who exploit vulnerabilities). The core content then details tools like Nmap for scanning IP ranges and detecting OS (02:27), Wireshark for micro-level packet inspection (3:16), Metasploit for exploiting vulnerabilities like EternalBlue against Windows 7 (3:58), HashCat for cracking passwords using wordlists like rockyou.txt (6:03), AirCrack-Ng for cracking Wi-Fi keys (4:47, cracking 'biscotte'), Foremost for carving files from disk images (7:20), SQLMap for exploiting SQL injection vulnerabilities (7:55), and the Social Engineering Toolkit (SET) for creating sophisticated phishing attacks (8:57). Throughout the presentation of these powerful capabilities, the narrator issues severe warnings against using them illegally, showing examples of real-world consequences such as Guccifer's 4-year sentence and Hamza Bendelladj's 15-year sentence. The ultimate lesson is that viewers should use these tools ethically, obtaining consent before testing, or risk ending up in prison, concluding with a final warning against insecure practices like storing passwords in plaintext. ### Introduction - Types of Computer People: Users (like the man using spreadsheets) - Programmers (who build software but get hit by ransomware) - Hackers (who exploit vulnerabilities). ### Tool Showcase - Nmap: Used to map out networks and detect OS/open ports (e.g., ports 80, 443, 8080) (2:08) - Wireshark: Inspects network traffic at a microscopic level (3:09) - Metasploit: Powerful framework used to exploit vulnerabilities like EternalBlue on Windows (3:43) - HashCat: Used for cracking password hashes (e.g., MD5) using wordlists like rockyou.txt (5:11) - AirCrack-Ng: Cracks Wi-Fi passwords by analyzing floating packets (4:28) - Foremost: Forensic tool for carving specific file types (doc, jpg, pdf) from disk images (7:16) - SQLMap: Automates SQL injection attacks to extract database schemas (7:55) - Social Engineering Toolkit (SET): Creates sophisticated phishing attacks via email, SMS, or cloned websites (8:57). ### Ethical Warning and Consequences - Illegal hacking activities like DDoS attacks or social engineering (phishing) lead to severe penalties; Guccifer served 4 years, Hamza Bendelladj served 15 years (1:04). ### Security Best Practices - Use HTTPS for secure data transmission (4:59); Never store passwords in plaintext; Hash passwords using one-way algorithms with salt (5:34). ![Screenshot at 00:01: Title slide declaring there are 3 types of computer people: Users, Programmers, and Hackers.](https://ss.rapidrecap.app/screens/Ukt2gVz25PQ/00-00-01.jpg) ![Screenshot at 00:10: Example of a social engineering attack showing a ransomware screen demanding Bitcoin payment.](https://ss.rapidrecap.app/screens/Ukt2gVz25PQ/00-00-10.jpg) ![Screenshot at 01:19: Display of the various ethical hacking tools \(AirCrack-Ng, John the Ripper, Metasploit, etc.\) surrounding the Kali Linux logo.](https://ss.rapidrecap.app/screens/Ukt2gVz25PQ/00-01-19.jpg) ![Screenshot at 02:27: Nmap output showing open ports \(22, 80, 443, 3306\) and OS detection \(Linux 4.x\)](https://ss.rapidrecap.app/screens/Ukt2gVz25PQ/00-02-27.jpg) ![Screenshot at 06:34: HashCat successfully cracking an MD5 hash \('51aabc...'\) using the 'rockyou.txt' wordlist, revealing the password 'BestPasswordEver'.](https://ss.rapidrecap.app/screens/Ukt2gVz25PQ/00-06-34.jpg)