I'm interested in learning some basic hacking; and I've read online that Linux is a good place to start. Although, I've been a Windows user for as long as I can remember. So I was hoping I could get a few tips and maybe even a good tutorial. Thanks! :)
Go to local events where you can get hands-on and watch others.
In the Phoenix area, we have
- OWASP Phoenix
- Arizona Security Practitioners' Forum (AZSPF)
- Phoenix 2600
Online, you can take the Offensive-Security course called Penetration-Testing with BackTrack Online. However, I warn you that it is very grueling to learn the material and apply it in the labs -- I would assume 5 or 6 months and 19 hours a day, everyday -- even with resources such as a full subscription to SafariBooksOnline, where you can search for more information and read books online.
I suggest that you purchase a separate laptop, specifically for Linux. Make sure to get one that is highly compatible with BackTrack Linux. You will want to purchase a separate USB WiFi adapter, such as the Alfa AWUS036H (which is not quite obvious yet, but it's useful to learn the MITM network architecture concepts). If you have Windows installed on a desktop, laptop, or whatever else device -- be sure to install and heavily use Cygwin and/or MinGW, although perhaps you can research those later, when you've already installed and used BackTrack. If you can specify the type (laptop) or graphics chipset options to support CUDA (both NVIDIA and Intel's as options would be nice). Your card will probably be listed on that self-referencing wikipedia article.
If you're looking for books on the topic I might recommend reading Kevin Mitnick's book: The Art of Intrusion: The Real Stories Behind the Exploits of Hackers, Intruders and Deceivers.
This book gives a nice introduction to the concepts and the mindset one must be in to be a "hacker."
Another resource I found to be extremely helpful is the CEH (Certified Ethical Hacker) Certification Preparation Handbook. It outlines procedures that White-Hat professionals use to pen-test businesses which is related to this topic.
You are asking for a lot... I suggest that you start in a "corner" of this website hacking.
My suggestion is that you learn about differnt ways to "hack" a web site. XSS or SQL injection is a good area to start in. Read about what they can do and how and why it's possible. And if you feel you have a basic understanding of how
SQL injection work then you can check out Hack This Site! they have a lot of exploitable sample sites and forums discussing them.