I'm really into hacking and security aspects. But I'm wondering about several things that is stopping me from pursuing this passion for the time being. One of the them is actually Programming language. As we all know that programming in general is an open-ended field, and what I mean you can't just by learning the basics of a language go into writing complex programs or exploitations As an example, http://www.exploit-db.com/exploits/29290/ this exploit was written by C, even though I did study C long before. I can barely understand the code.
Therefore, I'm planning on learning C, Python, and IA-32 as a start for the upcoming period. But after I mastered the basics, where to go to focus on programming as a part of information security not just a regular programmer.
My goal and aim is to read and understand the above exploit, and be able to write a similar exploitation (buffer overflows in general). Also, to be able to find and exploit such weaknesses, do I have to also understand systems internals ??
Also, I've heard that the above exploitation has something to do with socket programming under linux enviroment, and ANSI C what are those and why do I need them to write such an exploit?