Where to start cyber secuirty

there are a lot of websites out there that teach you to get involved in cyber security

As a suggestion, if you want to learn Kali Linux later and improve yourself on the web, I suggest you take a hack form

I'm also extremely interested in this, really debating joining the US military to go into the Cyber branch, seems like it'd be a really great way to learn.(plus free college afterwards)

13-03-2018, 06:35 AM

Horus1 Wrote: I can highly reccommend HackThisSite and HackTheBox.

I would definitely recommend HackTheBox or Vulnhub when you are somewhat experienced; for beginners, start digging into programming, analyzing network protocols (the basics) + get to knowOS level internals. From there, gradually develop your skills through reading CTF, exploitwrite-ups and experimentalresearch.

Certificates: CEH and Security+ for beginners; OSCP for intermediate level people

Do read the OWASP guides. OWASP testing guide should be your first stop. Then PentesterLab, Cyrary would be good.
Practice makes you better.

I recommend start learning Linux and Windows and different types of attacks and what they are used for and how they are used for, That's how I am learning right now. Just remember everyone has a personal preference of learning.

You should definitely start with the basics.

A good understanding of linux / windows (servers and clients) as well as networking is key.
Knowing python and at least one other programming language is good.


Its important to think about what you want to do later on.
If you want to work as a pentester for web applications, then a decent PHP knowledge can be useful.

If you want to go a lower level and reverse engineer stuff -> C and assembler (but then you should also know quite a few things about operating systems, ....)

The list goes on for quite a while....


Personally I can recommend to get some spare hardware, set it up and play around with it (windows server, active directory, vmware esxi, ...)
Dont be afraid to tear it down and start over when you want to try out something new.

And finally, see if you can get some friends together who are also interested in that topic and look for ctfs
https://ctftime.org/event/list/upcoming has a good overview of upcoming ctfs

I wouldnt recommend to start with attack / defense. It gets frustrating if you dont have a strong team you can join that can get you up to speed.
(And you also need a bit of infrastructure)

I recently participated with a few friends in the RuCTF and managed to land a place in the most active teams (Not gonna disclose what place for privacy reasons)
It can be fun, but you need quite a bit of hardware, infrastructure and knowledge

Thank me later, If you are requested to remove these from your server

simply tell them red sells these mods and this is against their TOS, they won't ask you to remove them after this.
(stolen assets btw)

Included: All UV Maps for Texturing, All the cars, and Buildings, Instructions i

What exactly are you referring to when you say Cyber security? There's a lot of different paths one could go into, like Website security, Windows, etc. What do you want to protect?

You can try CTF a.k.a Capture The Flag. and There are some bug hunting platform like Hackerone, Bugcrowd. You may try hackerone disclosed reports. It is by far the best thing of Hackerone. You can read bug reports sent by other researchers to compnayy and learn about latest and most creative attack vectors.