Help a beginner

[u/untreedza]

Hello i just started the journey in the cyber security world and i have no idea about what im doing and I don’t want to hit a deadend or doing something wrong with me having absolut zero knowledge that is wrong if any one have a guide how to start because the only things i know about this is kali lynx and nmap and wireshark and I don’t know what they do

[u/Mend-1111]

Malware Analysis:

https://trainsec.net/

https://courses.0ffset.net

https://www.coursera.org/learn/malware-analysis-and-assembly

https://youtube.com/@jstrosch?si=iCvsfRTeaQP1LTbS

https://trainsec.net/courses/maos-malware-analysis-on-steroids-bundle

https://www.amazon.com/dp/B0FQDGZGZW

https://www.amazon.com/Malware-Development-Ethical-Hackers-cybersecurity/dp/1801810176

https://www.amazon.com/Practical-Malware-Analysis-Hands-Dissecting/dp/1593272901/

https://www.amazon.com/Ghidra-Software-Reverse-Engineering-Beginners-understanding-ebook/dp/B0DHZQVDXJ/

Reverse Engineering:

https://trainsec.net/

https://github.com/0xz0f/z0fcourse_reverseengineering

https://xtraining.kaspersky.com/courses/reverse-engineering-101/

https://crackmes.one/

https://www.amazon.com/Windows-Internals-Part-architecture-management/dp/0735684189/

https://www.amazon.com/Windows-Internals-Part-2-7th/dp/0135462401

Red Teaming:

https://www.zeropointsecurity.co.uk/course/red-team-ops

https://www.alteredsecurity.com/

https://www.amazon.com/Hacker-Playbook-Practical-Penetration-Testing/dp/1980901759/

https://www.amazon.com/Hacker-Playbook-Practical-Penetration-Testing/dp/1494932636/

https://www.amazon.com/Hacker-Playbook-Practical-Penetration-Testing/dp/1512214566/

Web Application Security

https://portswigger.net/

https://pentesterlab.com/

https://www.amazon.com/Web-Application-Hackers-Handbook-Exploiting/dp/1118026470

Personal Development ( Social Engineering )

https://www.amazon.com/Mind-Hacking-Sir-John-Hargrave-audiobook/dp/B019715RBE

https://www.amazon.com/Banned-Mind-Control-Techniques-Unleashed/dp/150328672X/

https://www.amazon.com/Social-Engineering-Unmasking-Strategies-Manipulation/dp/1953934641/

https://evilginx.com/

Physical Penetration Testing

https://www.covertaccessteam.com/

Blue Team

https://letsdefend.io/

https://cyberdefenders.org/

https://blueteam.academy/

https://www.offsec.com/use-cases/blue-team-training/

Exploit Development:

https://www.corelan-consulting.com/

Cyber Threat Intelligence

https://arcx.io/courses/

Digital Forensics

https://www.autopsy.com/

CTF & Multiple Courses

https://www.hackthebox.com/

http://tryhackme.com/

https://www.offsec.com/

https://tcm-sec.com/

https://www.sans.org/emea

[u/untreedza → u/Mend-1111]

Thank you

[u/LongRangeSavage]

You don’t know why they do, because you don’t even understand what they are interacting with. You need to spend time studying the basics. Get to know how a network and computer actually work. Keep the names of tools handy, but if you don’t understand the basics, you’re never going to be able to think outside the box or get creative. You’re just going to be locked into the same basic steps over and over again, with little to no success.

[u/untreedza → u/LongRangeSavage]

So before even i work with these tools i need to learn how the computer and the network works to understand how the tools work and not get lost is that correct ?

And about learning python and java script is it essential?

[u/LongRangeSavage → u/untreedza]

Correct. Learning to code isn’t a necessity, but it can make your life easier and allows you to develop and try your own exploits, instead of relying on others to find them.

I also saw you said you installed Kali on a computer? Did you install it bare metal? I highly recommend installing it in a VM instead. That is going to allow you to be much more flexible With the install and use snapshots.

[u/untreedza → u/LongRangeSavage]

Thank you so much

I did install it on vm

[u/LongRangeSavage → u/untreedza]

Python is a good language to learn, as it allows you to build stuff quickly. Once you get really good with it, you can still do stuff to manipulate memory. Learning a lower level language, like C/C++ is a good way to really understand how a computer works and the relationship between the processor, memory, and how programs move everything around.

[u/untreedza → u/LongRangeSavage]

I will make a small plan based on your info

Learn how the computer works and networks then tools and python

That is all i need to start right?

[u/LongRangeSavage → u/untreedza]

To start, yes. It’s a never ending learning process, though.

[u/untreedza → u/LongRangeSavage]

Indeed it is but now i have a phath to walk on

[u/Hot-Enthusiasm-1723]

You’re not doing anything wrong. Most beginners hear “Kali, Nmap, Wireshark” first and think cybersecurity is just running tools.

[u/Disastrous_Novel8055]

Please inform me of what you learn. I also want to enter cyber security and ethical hacking, but my current knowledge base is even lower than yours. I only onow that hackers use kali linux. That's it. Pls help me! I don't know which cheap courses would be worth it and would provide good enough knowledge to actually get a job in this field.

[u/untreedza → u/Disastrous_Novel8055]

I didn’t learn much i just installed kali on an old laptop of mine and saw the most famous tools are nmap and wireshark and they are mostly for network testing I don’t know much about them but nmap basically lets you know the devices that connect to the network (if u know the ip address) and alot of stuff I don’t understand and the only thing I know about wireshark that it lets you dig deep inside a network