New People READ

[37]

I see a ton of new people joining asking the question "How can I learn Cybersecurity / Hacking for free" (Hacking is BROAD)

With the assumption they are talking about Penetration Testing :

I've included a few free resources for EXTREMELY intelligent Cyber-Sec mentors, They have taught me a TON of what I know all without charging a dime ( Links yo their Youtube pages below)



David Bomball
https://www.youtube.com/channel/UCP7WmQ_...51Od9QvM0w

Network Chuck

https://www.youtube.com/c/networkchuck

The cyber mentor

https://www.youtube.com/c/thecybermentor

Jon Hammond

https://www.youtube.com/@_JohnHammond
_____________________________________________________________________________________________________
Here's my advice
1. DO NOT jump around , start on a topic and learn it , practice it , and eventually master it

2.GO Slow , Take your time and absorb as much as you can .. Space it out and don't cram

3.DONT JUST learn what each part is , learn what it does and how it operates (Example OSI , TCP IP ) Challenge yourself to actually learn what each piece of the puzzle is and how it does what it does .


Here is the order I recommend learning

1. Networking Fundamentals (Basic structure) Layers of the OSI
resource below
https://www.imperva.com/learn/applicatio...osi-model/

2. OSINT - (open source intelligence ) This is the information gathering stage .. ((Kinda need to know information about the target before exploiting it ))

3. Exploitation Bind Shells (this is exploiting a vulnerability in software and connecting TO your target)

4. Exploitation Reverse Shells -- Little more Advanced (this is exploiting your target by having them connect back to you , this takes social engineering )

5.Post Exploitation (Persist the connection you have made with the target ! ) -- A dead shell is a useless shell -- Add the process to registry and make it call back to you on reboot.

OBVIOUSLY Amenity is important throughout this entire process . I would suggest changing your MAC Address and using a VPN that offers port forwarding ( Torguard is awesome )


** I don't contribute for popularity , I contribute because I remember when I was first starting out how much I appreciated advice and support through things **

I will add to this as I find good resources :)


White / Grey Hats thoughts ? Feel free to correct me

[66]

very informative thread thanks sir but i have a questions

I need to be a penetration tester and i read a lot and eventually I discovered that if you wanna learn PT

u need to study Security Plus Cer
And Network Plus
And then Learn eJPT Cer
And then u can go more advanced like OSCP or
ECPPT




What do u think ?

[37]

It all depends on the company's prerequisite requirements .. I personally dont feel you NEED certs to be good in the field..  Companies require them at times however you can have a solid understanding of the field without them .. To answer your question it really all depends on what you specifically go for and what company you dive in with..  Best of luck friend :)