If you’re still at the script kiddie level, you only need a machine to run a version of Linux, usually Kali or BackBox. Any basic machine can handle these distros.

Script kiddies don’t do anything original—they barely know how to code. If you stay at this level, there’s no need to worry about display quality or keyboard feel because you won’t be making scripts yourself. You’ll probably just grab them off Fiverr for five bucks. Unfortunately, if you remain at this level, you’ll get caught very quickly.

If you don’t want to rely on someone else’s scripts and exploits, then start by learning to code for a few years. Learn how to use Linux, macOS, and UNIX systems, and get a deep understanding of Windows—beyond just how to use it, learn how operating systems work.

After that, dive into networking and explore security layers. Once you have a grasp on these areas, you can start developing your own scripts.

When you’re comfortable writing your own scripts, you can move on to more advanced topics like cryptography and other areas in computer science that are essential to real hacking.

Real hackers targeting large organizations, corporations, and even government servers employ a variety of covert tactics and advanced methods that go far beyond small-scale hacking. Their methods involve a deep understanding of networks, security protocols, and often social engineering.

• Insider Tactics and Social Engineering:
  • Many sophisticated hackers don’t rely solely on digital intrusion; instead, they often use social engineering to infiltrate their targets. By posing as employees or contractors, they gain trust and, eventually, access to secure credentials. Phishing, fake tech support calls, and other deceptive tactics are commonly used to create an insider threat.
• Concealed Devices:
  • Hackers might use tiny, easily hidden devices such as USB drives loaded with malware or single-board computers (e.g., Raspberry Pi) to gain access. These small devices can be left behind discreetly, blending into their surroundings while logging network data or recording keystrokes. Once connected, these devices may be set up to establish remote connections, enabling hackers to access target networks without physically being there.
• Operating Systems and Anonymity:
  • In addition to specialized devices, hackers often use specific operating systems that prioritize security and anonymity. Kali Linux is a popular choice for its extensive suite of hacking and penetration testing tools, while Tails OS allows users to operate in stealth mode, wiping any traces of activity after each session. These tools support a range of hacking activities, from network probing to vulnerability testing, and are favored for their anonymity.
• USB and Remote Access Techniques:
  • USB-based attacks remain effective due to the simplicity of plugging in malware. Hackers may introduce these devices to gain remote access to sensitive networks. Once a network is compromised, hackers can maintain their presence from afar, often using encrypted connections to avoid detection. Remote operations allow them to continue their work undetected for extended periods.
• Anonymous and Distributed Attacks:
  • Groups like Anonymous and similar collectives focus on methods that don’t require physical access. Instead, they rely on techniques like distributed denial-of-service (DDoS) attacks, which overwhelm servers, and web-based exploits to deface websites or access sensitive information. These operations are entirely remote, often involving complex networks of proxy servers and encryption to mask their identities.

Advanced hackers are adept at blending multiple strategies, exploiting vulnerabilities in both software and human nature. Their methods reflect a high degree of technical skill and psychological insight, allowing them to infiltrate targets while remaining largely undetected.

There are basically four types of hacking or practice hacking:

1. If you’re hacking into networks or systems via the internet

You’ll need a system that can support a hacking or pen-testing Linux distro (like Kali Linux). Ideally, find a system that lets you access the BIOS so you can boot your own operating system from an external drive (USB or CD) and supports drivers for integrated devices.

This covers nearly every laptop that can run the home or professional version of Windows. However, you might run into compatibility issues with other native OS setups on newer laptops.

MacBooks can work well too, but installing Linux on them can be tedious. Chromebooks are tricky—they may or may not support external devices for mounting an operating system, such as external wireless cards.

2. If you’re mainly writing code and making scripts…

This can be done on almost any device, even a Chromebook. In fact, Chromebooks might be ideal since they support Crouton (a Linux environment for Chrome OS), giving you a full Linux environment, which is excellent for programming.

OSX (Mac) is also a good option, as it’s a Unix-based system and provides a Linux-like environment and terminal access, much like a traditional Linux setup.

3. If you want to simulate networks to practice hacking into them…

You’ll need to run multiple virtual machines (VMs), which calls for a system with as much RAM as possible and a capable CPU, depending on how many VMs you plan to run. Most modern CPUs should handle at least four VMs smoothly.

4. If you want to run password-cracking and dictionary-attack scripts…

In this case, you’ll want a laptop with a gaming-grade graphics card. The more CUDA cores the GPU has, the faster these tasks will run. We’ll go into more details about this in the next section.

Writing Hacks (Coding):

For writing code and basic hacking tasks, CPU power isn’t a major concern. Most hacking scripts and tools can even run on a Raspberry Pi. Virtually every modern CPU today has at least 2 cores and ample clock speed for coding.

Though it’s not strictly necessary to have the latest CPU, it’s helpful if you plan on running a virtual machine (VM) or running Windows 10/11, as a modern CPU will more reliably support 8GB RAM or more. CPUs like Celeron, Pentium, and Atom may be sufficient for Linux but will struggle with Windows 10/11.

Hacking Networks (or Pen-Testing):

If you’re simulating networks and running VMs—especially “nested” networks, where you run a VM within another VM—your CPU becomes more important. For this kind of work, you’ll eventually want the most powerful CPU you can afford, particularly after you’ve maximized your RAM.

Look first for a higher number of cores or threads, as multitasking is key. Once you have options with a similar core count, consider clock speed.

Update: Note that the 12th and 13th-gen Intel Core CPUs feature more cores, but some cores don’t support hyperthreading (P-cores for performance vs. E-cores for efficiency). This can affect VM performance, as not all cores are equally efficient for virtualization tasks. More details can be found in my post on virtualization.

RAM

8GB
Most hackers find 8GB of RAM sufficient, and ethical hackers can accomplish a lot with it, too. This amount is generally enough to run at least one virtual machine (VM) for Kali Linux alongside the main Windows operating system.

4GB
For a Windows system (Home or Professional), 4GB of RAM is barely enough. Running the OS and an IDE will use up most of the available memory, and attempting to run a VM for Linux on top of that will likely lead to lag.

If 4GB is all you can afford, it may be best to delete Windows and install Linux instead. With Linux, 4GB is adequate to run a VM, an IDE, and a few other programs without lag.

How is a VM Useful for Hacking?
VMs are not only valuable for creating home labs (simulated targets) but also provide a layer of anonymity and are easy to restore. You can save a VM to a USB drive and quickly restore your setup on a different computer if needed, preserving all your data and configurations.

Lastly, for pen-testing purposes, if you plan to run security testing on an entire simulated network, you’ll need to operate multiple virtual machines (VMs).

For running 4-5 VMs, 16GB of RAM should be sufficient. If you’re aiming for 10-15 VMs, you’ll need at least 32-40GB of RAM.

High-end 17-inch gaming and workstation laptops can accommodate up to 64GB, but it’s rare to need this much RAM unless you’re dealing with extremely large-scale simulations.

DDR5 vs. DDR4
You’ll likely encounter different types of RAM, with DDR5 being the latest. While DDR5 offers faster data transfer rates, which can improve CPU performance, the gains are not particularly significant for hacking tasks, running IDEs, or managing virtual machines. It’s an improvement, but not one that you need to be overly concerned with for most hacking operations.

If you really want to dive deep into ethical hacking and understand hacker methods, you’ll need an external WiFi adapter that supports packet injection, as this is an essential part of WiFi hacking.

You’ll use this adapter to execute code that can analyze and attempt to breach WiFi networks.

WiFi Standards

Dual-band or tri-band AC network cards (like WiFi 6 or WiFi 7) are ideal because they provide the latest compatibility with older security protocols like WEP, though WEP-secured networks are almost nonexistent today. Most networks, even in residential areas, now use WPA2 or WPA3, which are far more challenging to crack.

Design

Hackers look for portable laptops that make it easy to remove or swap hard drives. They avoid installing anything on the M.2 drive that’s soldered to the motherboard, opting instead to install data on removable drives, which can be destroyed if needed. They also typically change their MAC address frequently, which is simple with multiple network adapters.

Desktop + Laptop Setup

Most hackers have a setup that includes a portable laptop and a powerful desktop. Often, they’ll use a cheap, refurbished laptop like a MacBook or a Lenovo ThinkPad, which offers reliable battery life, durability, and ease of customization. Many hackers connect via SSH from their laptop to a more powerful desktop at home to run heavy-duty tasks.

Desktops are much faster than laptops due to the CPU running at higher clock speeds and having an easier time using turbo boost (reaching higher clock speed without compromising temperatures) on top of that high end desktops are  equipped with high-end  GPUs to handle intensive password cracking, packet injection, and other high-processing tasks.

What kind of laptop would complement this desktop set up? One with a basic Core i3 or equivalent processor, an integrated GPU, and upgraded RAM (up to 8GB for most hacking needs) work fine. Extra RAM is relatively inexpensive and can enhance performance significantly.

The laptop typically runs a Linux distro like Kali Linux or Parrot OS, which are pre-loaded with necessary hacking and pen-testing tools.

Ethical vs. Criminal Hacking

For ethical hackers or pen-testers, this setup is standard. Criminal hackers, on the other hand, may use any device they can easily discard later. Some even assemble custom devices with minimal, cheap components for single-use purposes to avoid leaving behind any traceable evidence.

Additional Considerations

For advanced tasks, you may eventually look into FPGA boards or software-defined radios for specialized hacking applications. However, these are best explored after you have a solid foundation in the field.

Most of the information you need is accessible online, though you might have to dig beyond the first page of search results. Many platforms, like Udemy, offer free courses on ethical hacking basics.

Note: Many YouTube tutorials come from former hackers who later turned to teaching after legal troubles. While insightful, aim to focus on ethical hacking and pen-testing—it’s legal, lucrative, and lets you use your skills without the risk.