# Script Kiddie

Script Kiddie is a pejorative label hackers use for unskilled attackers who lean on prewritten exploits and tools instead of writing their own code. The term surfaced in the hacker zine Phrack in December 1998 and hardened into standard security vocabulary through papers, panels and one very popular DayZ video that put the insult in front of millions of gamers.

## Origin
The exact coinage is unknown, but the earliest widely cited use appears in the hacker zine Phrack, Volume 8, Issue 54, published on December 25th, 1998, inside a piece on remote OS detection via TCP/IP stack fingerprinting[2]. The article treats "script kiddie" as already-existing jargon rather than a new coinage, meaning the term was already circulating on IRC and BBS-adjacent hacker circles before Phrack committed it to print[6].

The term picked up formal weight when security professional Lance Spitzner released the paper "The Tools and Methodologies of the Script Kiddie" on July 21st, 2000, defining the archetype for a wider infosec audience[6]. Urban Dictionary followed on November 1st, 2001, when user Keith Jesus Wilcox submitted an entry describing a script kiddie as someone who downloads exploits without understanding or respecting them[6].

- **Platform:** Phrack zine (coinage) / YouTube and Reddit (popular spread)
- **Creator:** Unknown
- **Date:** 1998

## Overview
Script Kiddie, also spelled Skiddie and sometimes softened to Script Bunny or Script Kitty, is hacker slang for someone who downloads a ready-made exploit and points it at a target without really understanding what the code does[3]. The insult carries a very specific charge inside security circles because it separates people who can find and write vulnerabilities from people who just run other people's work[1]. It gets used against DDoS launchers, website defacers, botnet renters and teenagers who paste a payload from a forum and take credit for the breach[3].

The label is not just about age or inexperience. Security researchers use it to flag a threat profile: noisy, opportunistic and dependent on public tooling, but still capable of causing real damage when the tool is powerful enough[7]. That tension between low skill and high blast radius is what makes the term stick in professional writing as well as in gamer trash talk[6].

## How to Use
The word is typically deployed as an insult inside hacking, gaming and infosec communities to dismiss someone claiming credit for an attack. Common convention pairs it with a specific behavior: bragging in chat, using a public DDoS booter, running Metasploit modules without knowing what they do, or getting caught because the borrowed tool logged something obvious[3]. In security papers the tone flips and the term becomes a threat category rather than trash talk[6].

## Frequently Asked Questions
### What is Script Kiddie?
It is a pejorative hacker term for an unskilled attacker who relies on third-party scripts, exploits and tools written by others to break into networks, systems or websites[6].

### Where did Script Kiddie come from?
The earliest widely cited use is in the hacker zine Phrack, Volume 8, Issue 54, published on December 25th, 1998, in an article on TCP/IP stack fingerprinting[2].

### What does Script Kiddie mean?
It labels someone who runs prewritten exploits without understanding them, often bragging about attacks they lack the skill to build themselves[3]. Security researchers also use it as a threat category for noisy, opportunistic attackers using public tooling[6].

### How do you use Script Kiddie?
Typically as an insult inside hacking, gaming or infosec communities against someone taking credit for an attack executed with borrowed tools like public DDoS booters or copy-paste exploits[3]. In academic writing it is used as a neutral threat classification instead[6].

### Is Script Kiddie still popular?
Yes, the term is a classic piece of hacker slang that stuck in both gamer trash talk, largely thanks to viral DayZ cheat videos in 2013[8], and in professional security venues like Defcon panels[9].

## References
1. [http://phrack.org/issues/54/9.html](<http://phrack.org/issues/54/9.html>)
2. [https://www.urbandictionary.com/define.php?term=script+kiddie](<https://www.urbandictionary.com/define.php?term=script+kiddie>)
3. [http://resources.sei.cmu.edu/library/asset-view.cfm?assetid=7657](<http://resources.sei.cmu.edu/library/asset-view.cfm?assetid=7657>)
4. [http://www.firstnetsecurity.com/library/misc/KnowYourEnemy1.pdf](<http://www.firstnetsecurity.com/library/misc/KnowYourEnemy1.pdf>)
5. [https://knowyourmeme.com/memes/script-kiddie](<https://knowyourmeme.com/memes/script-kiddie>)
6. [https://web.archive.org/web/20081107091339/http://dow.ngra.de/2008/11/04/script-kiddies-have-awesome-tools/](<https://web.archive.org/web/20081107091339/http://dow.ngra.de/2008/11/04/script-kiddies-have-awesome-tools/>)
7. [https://www.youtube.com/watch?v=gKt_d66D43g](<https://www.youtube.com/watch?v=gKt_d66D43g>)
8. [https://www.youtube.com/watch?v=I3pNLB3Cq24](<https://www.youtube.com/watch?v=I3pNLB3Cq24>)

---
Source: https://meme.com/memes/script-kiddie
Published by meme.com — The Internet Meme Library