Cyber security Roadmap
.jpg)
Are you confused like me ? Where to start how to learn pentesting? Then you are in right place.
In this article We’ll provide you full roadmap for how to become an ethical hacker
1.COMPUTER FUNADAMENTALS
.jpg)
Only if you dont have any idea of computer this will teach you very basics, It is good to learn, but if you already have basic idea about computer you can skip it 😄.
Computer Fundamentals will provide you basic knowledge about computer how does it work etc.
to learn computer fundamentals try this two courses
- CompTIA A+ (220-1001) https://www.udemy.com/course/total-comptia-a-certification-220-1101/
- CompTIA A+ (220-1002) https://www.udemy.com/course/total-comptia-a-certification-220-1102/
2. LEARN ABOUT OPERATING SYSTEM
After completing Computer Fundas learn about OS like what is linux ? What is Linux Kernel, and its functions ? What are Linux Distro/ or Distributions?
How to install linux find out yourself in YouTube if u dont know.
TRY OUT THIS PLAYLIST TO LEARN LINUX BASIC CMDS ETC
WHAT IS BEST OS FOR HACKER?
NEVER get into this debate
OS Does not makes better Hackers, Hacker is who can do his task on any OS, Windows or Linux all work equally well for most of the tasks,
So one can choose any, be it any Linux distro ( and installing all required applications) , or Windows ( again installing required applications. Most so called Hacking OS are just dump of all the tools that probably
3.LEARN TO FIND SOLUTIONS BYSELF
Learning How to do Google Search like Hackers ( this is The Most Important Skill To Learn). Searching / Research is what can really make someone Hacker, it is the most important skill. Just Search anything on Search engines(Google or any other) , Facing any problem ? How to <problem> search this and you will get the solutions 99% of the times, at least something close related to the problem & solution
Start searching somethings like
- How to does websites work?
- How to install python on window
- How to start learning bug hunting
Etc…
Useful tip
https://tryhackme.com/room/googledorking
Learn What is Cyber Security / Hacking / Penetration Testing / Blue Teaming / Red Teaming / Different Cyber Security Domains( Jobs)
You can skip this for now.
So Now you already know searching so search by yourself and learn about few things.Read more and more, get some clue, connect them all in mind.
Ex.
- What is hacking
- What is cybersecurity
- Why do we need cyber security
- What does a hacker do
- What is bug hunting
- What is pentesting
CURIOSITY , RESEARCH & PATIENCE
Always try to know more about things to break things efficiently, some knowledge of How to make things is better to have. You can’t learn everything in just one second you need patience to learn , things can take some time, so be Patient.Trust thing when you read from good reputed source, also question them in right way, being curious and being stupid are two different things, be curious.
3. Towards Basic Knowledge of Security & Hacking
Learn Programming language ( Start basics )
Start with any 1 or two languages. Start with python or JavaScript.
Don’t focus on how many programming languages you know focus on any one language and perfect it then you can go with other.
Many people ask is programming language necessary for hacking.
No
It’s not necessary but if you don’t know programming language how will you create tools, automation etc. stuffs.
If you want to become good hacker, you should learn programming as my perspective it is mandatory.
Which programming language you should learn then?
it Depends on what you want to do.
Like Python helps allot in automating day to day tasks, making things easier. JavaScript it is Hard to find websites today that don’t use JavaScript these days, better learn basics
Any other Language like C++ or Java Recently Go ( Golang) has also been catching attention
Course for python
Cyber Security & Hacking terms
Some terms in Cyber Security & Hacking keep coming , repeating every time, a common Jargon , so it's better to search and learn few of terms, so when you see them, you don't get confuse
Vulnerability | Exploit | Threat | Malware | Virus | Botnet | Cloud | Firewall | Virus | Ransomware | Trojan | Worm | Spyware | Adware | Rootkit | Phishing | Spear Phishing | DoS | DDoS | Encryption | Encoding | Penetration Testing | Social-Engineering | Clickjacking | White-Hat | Black-Hat | SAST | DAST | APT ( Advanced Persistent Threat) | Authentication |ciphertext | CVE (Common Vulnerabilities and Exposures)| cryptography | decrypt | DMZ ( Demilitarized Zone) | drive-by download | encode | encryption key | honeypot | IaaS | IDS | IPS | | insider threat | ISP | keylogger | LAN | OWASP | PaaS | Authorization | packet sniffing | patch | PKI (Public Key Infrastructure) | SaaS | sandboxing | SIEM | sniffing | SPAM | spoofing| supply chain | two- factor authentication |
Windows OS
You should how to install Windows how to repair if you damaged while Learning. Know few things like auto-start locations, registry editors, services managers, task manager.....just normal admin tasks.
Again we don't need to become Windows Administrator ( yes this is also a thing), but we need to know enough to protect it or attack it, as both are job of a Security Engineer
If you already know or are comfortable with OS, don't spend time on whole courses, search things as they come and learn.
Linux
Just like Windows, Basic Linux Administrative Knowledge is required.
You need to learn basic CLI commands as we don't get every time GUI interface , most of the times we are operating remotely and with CLI interface, so make CLI a friend
If you don’t know what cli gui google it and learn by yourself
ITPro Tv CompTIALinux+ (XK-005) course is good enough to start with.
heree
COMPUTER NETWORKING
Why is Network required & it's use Different Network devices like Router, Switch, Modem IP Address ( Public & Private IP Address ), Network Subnets and Calculations ( Classful & Classless ) , knowing different IP Ranges
OSI Layers & TCP/IP Model
Learn Networking only as much required,
I am listing few topics which you can search and Learn & also some resources attached at end
We want to become Security Engineers & Hackers, not Network Engineers only
So spend time maybe 1-2 week on this
- Server Client model
- DNS request,
- How Website request is made and resolved
- What are Ports and Common Ports on computer
- What is DHCP , SSL their functions
- Proxy and It's uses ( forward & reverse proxy), VPN, VLAN , MAC Address
- Firewall, Load-Balancers
IF YOU WANNA LEARN MORE:
CompTIA Network + (N10-008) course is good enough to start with.
Telegram link : https://telegram.me/COMPTIA_CCNA
More:
PART 2 COMING SOON