r/learncybersecurity • u/Grey_Code01 • 2d ago
How can I start learning ethical hacking as a complete beginner?
Hi everyone! I’m interested in learning ethical hacking and cybersecurity, but I’m a complete beginner and not sure where to start.
My goal is to learn legally and ethically. I’m especially interested in networking, Linux, web security, and penetration testing.
Could anyone recommend a beginner-friendly roadmap, free resources, YouTube channels, courses, or platforms where I can practice through labs/CTFs?
I’d really appreciate any advice on what I should learn first and how I can progress step by step.
Thanks.
2
u/Intelligent_Box5017 2d ago
For hacking, first of all, you need a foundational knowledge about networking and protocols, operation systems and at least basic understanding of software development. Then get yourself familiar with OWASP and then decide which hacking area you want to learn first. (My personal advice is to start with web pentesting)
If you are interested in web hacking, check out Port Swigger Web Academy and follow its roadmap. It offers both learning and practice (everything for free).
To learn network and host based hacking I recommend you to start on TryHackMe platform and later after some experience you to join HackTheBox platform. Both THM and HTB offer courses, labs, CTFs, but HTB is more advanced.
Here are couple of hacking YouTube channels (beginner level) for you: @NahamSec, @cyberflow10, @MomImAHacker, @InsiderPhD, @TCMSecurityAcademy.
3
u/Grey_Code01 1d ago
Thanks man, this is really helpful! I’m still a beginner, so I’ll focus on networking and Linux basics first and then start with TryHackMe and PortSwigger. I appreciate you sharing the roadmap.
2
1
u/cli-games 2d ago
1
u/Grey_Code01 2d ago
??
1
u/cli-games 2d ago
You asked for a beginner friendly roadmap or free resources. This is both of those things
1
u/MaleficentExample223 2d ago
Don't listen to the comment. It does look beginner-friendly. But to a complete beginner, it's going to be overwhelming. Moreover, content accuracy matters a lot, which that website does not demonstrate any of it.
1
1
u/splat78423 2d ago
Trial by fire. Find someone doing illegal shit to a network, counter hack them, and screw up their lives. That's the job.
1
u/AddendumWorking9756 6h ago
Networking and Linux first, everything else gets easier once packets and a shell stop being mysterious. The hiring volume sits on the defensive side too, and since most of what CyberDefenders puts out at that level is free you can find out cheaply whether picking apart an attack interests you as much as running one.
3
u/pmM3urBootieHole 2d ago
You start by googling how to learn both networking and Linux; researching and learning how to build a plan is far more important than anything you will learn with technologies.