We recently discussed in our Telegram channel "Kodik", what programming languages a hacker really needs. The question aroused a lot of interest and controversy, so we decided to gather all the thoughts in one article — without myths and romanticization of "hacking", only practical advice and an ethical approach to cybersecurity.
The word "hacker" is associated with hacking by many, but in the professional world, a hacker is often called a cybersecurity specialist. This article is about programming languages that are really useful in ethical practice (penetration tests, auditing, and the development of protective tools).
Python is the main all-rounder for a pentester
Easy to start, huge set of libraries.
Rapid prototyping of scanners and parsers.
It is used for automation, traffic analysis, and writing exploits in the laboratory.
Bash / Shell and PowerShell — the "language" of the system
Used for automation, information gathering, scripting for Windows and Linux. They are important for fast work in the terminal.
JavaScript — for web hacking and browser protection
Helps analyze client scripts, find vulnerabilities like XSS, understand DOM and browser security policies.
SQL — to understand databases and injections
SQL injections are still at the top of vulnerabilities. You need to know the syntax of different dialects: MySQL, PostgreSQL, MSSQL.
C and C++ — deep understanding of systems
Learning C and C++ helps you understand memory-level vulnerabilities, understand native applications, and work with analyzers.
Assembler - for reversing
It is needed for reverse engineering and analysis of binaries. Even a basic understanding of the assembler opens access to the study of low-level vulnerabilities.
Go and Rust are modern tools
Go is convenient for creating network tools, Rust — for safe and fast applications. They are increasingly found in security projects.
Java, PHP and others
Java is for analyzing corporate systems, PHP is for classic sites. Master them if you work with a specific stack.
What to learn first?
Python — network, parsing.
Bash / PowerShell.
SQL + web basics (HTML, JS).
C/C++ — later, for deepening.
Go or Rust — for performance tools.
Where to practice safely
CTF platforms: tryhackme, hackthebox.
Own laboratories on virtual machines.
Bug bounty programs.
Tools and ecosystem
Wireshark, Burp Suite, nmap, GDB, and ghidra. It is important to be able to combine tools with programming languages.
How to apply knowledge
Write scripts, analyze CVE reports, and publish your research. Develop not only technical but also communication skills.
In the attachment Code There are courses on Python, databases, and practical tasks that will help beginners in cybersecurity.
Conclusion
Starter set: Python + Bash + web basics. Later — C, assembler, Go or Rust. It all depends on which area of security you want to develop in.