Introduction

As educators, we often remind learners: “Skills are built before solutions are found.”
Ethical hacking is no different.

Before an ethical hacker can protect a system, they must first understand how it works, how it breaks, and how it can be defended.
This chapter explores the core skills and essential tools every beginner should know — explained in simple, relatable terms.

1️⃣ Essential Skills for Ethical Hackers

1. Networking Knowledge (the foundation of everything)

If computers were people, networks are the languages they speak.

Here are the basics — explained simply:

🔹 TCP/IP

Think of TCP/IP as the postal system of the internet.

• TCP (Transmission Control Protocol) ensures a message is delivered accurately.
• IP (Internet Protocol) ensures the message finds the right address.
  Without TCP/IP, devices would not know how to talk to each other.

🔹 DNS

DNS = the internet’s phonebook.
When you type google.com, DNS translates that name into the IP address computers understand.

🔹 HTTP/HTTPS

This is the language of web communication.

• HTTP = unsecured
• HTTPS = secured with encryption
  Ethical hackers must understand how data flows through webpages.

🔹 VPN

VPNs create a private tunnel for data to travel safely.
They protect identity and location — something both attackers and defenders use.

2. Operating System Fundamentals

Ethical hackers must be comfortable using:

• Windows
• Linux (especially Kali Linux or Parrot OS)
• macOS (optional but useful)
  Linux is especially important because:
• most servers run on Linux
• most hacking tools run best on Linux
• it offers more control for command-line operations
  Understanding the file system, permissions, and command-line basics is essential.

3. Programming & Scripting Basics

You don’t need to be a developer, but knowing how things are built helps you understand how they break.
Useful languages:

• Python → automation, scripting, exploit writing
• JavaScript → essential for web security
• SQL → databases and SQL injection understanding
• Bash → command-line automation on Linux
  Even basic coding literacy helps you think like an ethical hacker.

4. Analytical & Problem-Solving Mindset

Ethical hacking is detective work.
You:

• observe
• question
• test
• reflect
• iterate

Just like inquiry-based learning, ethical hacking values curiosity over memorization.

5. Knowledge of Cybersecurity Concepts

At a beginner level, you should understand:

• Malware types
• Encryption basics
• Firewalls & IDS/IPS
• Authentication & authorization
• Cloud security basics

These concepts form the safety net when evaluating a system’s security posture.

2️⃣ Tools Used by Ethical Hackers

1. Kali Linux

A popular Linux distribution loaded with penetration-testing tools.
It's like a toolbox specifically designed for ethical hacking.

2. Nmap

Think of Nmap as a digital radar.
It scans networks to reveal:

• active devices
• open ports
• running services
• vulnerabilities

3. Wireshark

A packet analyzer — it allows you to “listen” to network traffic.
It's crucial for:

• troubleshooting
• detecting suspicious activity
• understanding data flows

4. Burp Suite

A powerful tool for web application security testing.
Useful for discovering:

• broken authentication
• input vulnerabilities
• insecure session handling

5. Metasploit Framework

A platform for:

• developing exploits
• testing vulnerabilities
• validating security controls

This is where the offensive side of ethical hacking becomes hands-on.

6. Nessus or OpenVAS

Both are vulnerability scanners used to detect weaknesses quickly.

7. Python Scripting

Python scripts can automate:

• scanning
• testing
• monitoring
• reporting

It’s a highly practical beginner skill.

3️⃣ Closing Reflection

Ethical hacking isn’t just about “breaking into systems.”
It’s about understanding how systems work, asking the right questions, and protecting what matters.

As an IB educator, I see ethical hacking through the lens of inquiry:

• Observe the system.
• Ask what could go wrong.
• Investigate responsibly.
• Act ethically.

These skills and tools form the foundation upon which every ethical hacker — beginner or expert — builds their prtice.