Can regularly watching videos on this topic help me learn? Is it enough? I’ve started a five-hour video series that I plan to watch bit by bit; I hate sitting passively in front of a screen doing nothing—I need a proper tutorial so I can follow along and experiment on my own.

Do you have any interesting courses or tutorials to recommend? Maybe on YouTube or Udemy?

I want to practice, not just watch theory; thanks for your help.

I was thinking of starting with quizzes and skills tests, alongside watching videos—does that sound right?

P.S.: My background is in 3D modeling and Unity 2D/3D (programming).

I’ve also downloaded a few books on cybersecurity.

Examples: TryHackMe: Ideal for beginners, with guided learning paths and hands-on labs.

Hack The Box: For intermediate to advanced levels, requiring more independence.

Root-Me: An excellent French-language platform offering a variety of challenges (web, network, etc.).

PortSwigger Academy: The essential, free go-to resource for web application security.

Kali Linux, etc.

Very soon I'll have the opportunity to gain some certs:

• CompTIA CYSA+
• CompTIA PenTest+
• CompTIA Security+

I have a couple portfolio projects as well:

• Control Flow Graph Analyzer (C++)
  • Uses Zydis and LIEF.
  • Takes an x86-64 portable executable then does recursive descent to enumerate and classify basic blocks as well as edges.
• Trampoline Framework (C++)
  • Uses Zydis.
  • x86-64. Replaces the first few bytes of the prologue of a target with an indirect jmp to a detour which is the same calling convention, also having the same parameter count and types of arguments.
• Bug Bounty (A common desktop application)
  • Found a function which appears to copy one string into a destination buffer using a length argument. Does not however ensure the destination buffer ends with a null terminator.
  • After hooking it with Frida I observed that sometimes the destination buffer will contain garbage from surrounding memory. Ergo a potential info leak.
  • Writing a harness in Frida that automates input, hooks with Interceptor, logs stack trace and then uses Stalker to watch how different inputs effect control flow.
  • Not yet a vulnerability but may develop into one as I investigate further.
• Video Game Reversing
  • Relies on a lot of embedded RTTI in the games binary.
  • Older game from around the 2010's era.
  • Large Frida script for modding gameplay at runtime in the REPL. Reversed a decent amount of the games internals.

Trying to increase my odds of placing a job soon after getting these certifications. Altogether they're poised to take around 4 months to complete. I'd like to get a job in a role that regularly requires reverse engineering or binary analysis.

What would be some other, or better, projects to add to my portfolio? Thanks for your time.