The OSI Model — A Hacker's Framework

#The OSI Model — A Hacker's Framework#link

Now that you understand why networking knowledge is your most powerful weapon, we need a shared language to discuss it. The Open Systems Interconnection (OSI) model is a 7-layer conceptual framework that describes how data moves from an application on one computer to an application on another. Every protocol, every tool, and every attack operates at one or more of these layers. Mastering this model is like learning the periodic table before doing chemistry.

The Seven Layers — Bottom to Top

Encapsulation — How Data Flows Down the Stack

When you send data — say, an HTTP request — it starts at Layer 7 and moves downward. At each layer, a header (and sometimes a trailer) is added. By the time the data hits the wire, it has been wrapped in multiple layers of headers. This process is called encapsulation. The receiving machine reverses the process, stripping headers at each layer as data moves back up.

Data Flow (Sender):
  [HTTP Data]                    ← Layer 7: Application
  [TCP Header][HTTP Data]        ← Layer 4: Transport
  [IP Header][TCP][HTTP Data]    ← Layer 3: Network
  [Eth Header][IP][TCP][HTTP][CRC] ← Layer 2: Data Link
  011010010110...                ← Layer 1: Physical (bits on wire)

The TCP/IP Model — The Real-World Simplification

While the OSI model is a teaching tool, the real world mostly uses the TCP/IP model, which collapses the 7 layers into 4. You will see both models referenced in documentation, tools, and certifications, so you need to know how they map to each other.

Why Hackers Care About Layers

Every attack targets a specific layer. A SQL injection targets Layer 7 (Application). An ARP spoofing attack targets Layer 2 (Data Link). A SYN flood targets Layer 4 (Transport). When a firewall blocks your attack, understanding the layer tells you why — and how to pivot. If a Layer 3 filter blocks your ICMP packets, maybe you can tunnel through Layer 7 using DNS instead.