What to study for hacking?

Question

IT education

Asked a question (more precisely set). If I understand correctly, what distinguishes white/black hackers from other programmers is that they do not have a resume and portfolio for quite logical reasons. (I ask for corrections if the conclusion is not correct). From this came the following questions: 1: What should be taught? I’m far from a professional, but I know the basics in some areas, I studied Java, Python, C ++, HTML / CSS / JS / Jq and SQL. Also familiar with the network device through work for an Internet provider. 2: What types of hacking services are there and which are popular / not popular? I would be happy to work in the office, but they don’t take them to offices. Therefore, I am very interested in freelancing. And I want to understand what activities I need to download. 3: Where is it promoted as a "provider" of services? I don’t think that you will find tenders of this type in freelancing. Thank you in advance for your answers and do not judge strictly.

Answer 1

If in the Russian Federation:
Civil Code of the Russian Federation
Criminal Code of the Russian Federation

Answer 2

If I understand correctly, what distinguishes white/black hackers from other programmers is that they do not have a resume and portfolio for quite logical reasons. (I ask for corrections if the conclusion is not correct).

If a person is engaged in programming for the first day, is he already a hacker?
Everyone who values ​​themselves has a portfolio.

1: What should be taught?

And what are you going to "hack"? As I understand it, we are talking about web applications.
OWASP, read hacktivity on hackerone, bugcrowd, intigriti, etc.
Real World Bug Hunting, The Web Application Hacker's Handbook, Web Hacker 101
Learn the basics: how web resources work, ports, ip, protocols, headers, request methods. You need to know the work of JS, html, in general, be able to work with the site stack. In general, it is easier to say what NOT to teach. The books above will help you in the beginning.

2: What types of hacking services are there and which are popular / not popular?

Analysis of the application as a whole, search for vulnerabilities. There are already many different ones, for every taste and color.
Or the search for possible attack vectors in the future, without demonstrating the impact, if we are talking about a pentest.

3: Where is it promoted as a "provider" of services?

Work white hat, hackerone, bugcrowd, intigriti, synack

Answer 3

The criminal code and the book of recipes "1000 dishes from breadcrumbs".

Answer 4

https://tryhackme.com/

Answer 5

What to study for hacking?

Literature on information security. And do not study the literature on hacking.