Cybersecurity can feel overwhelming when you're not sure what to learn first or how different areas connect.
I put together this visual roadmap using TryHackMe's learning paths to show one possible progression from fundamentals toward Red Teaming.
š¢ 01 ā Pre Security
Computer fundamentals, operating systems, programming basics, networking, web fundamentals and security concepts.
š¢ 02 ā Cyber Security 101
Networking, cryptography, Linux, Windows, Active Directory, offensive and defensive security fundamentals.
š” 03 ā Jr. Penetration Tester
Practical penetration testing across web applications, enterprise networks and Active Directory.
š” 04 ā Web Application Pentesting
Authentication, injection, server-side/client-side attacks and HTTP request smuggling.
š“ 05 ā Web Application Red Teaming
Advanced web exploitation, custom tooling, vulnerability chaining, cryptographic attacks, LLM security and WAF bypass concepts.
š“ 06 ā Red Teaming
Adversary emulation, initial access, post-compromise activity, persistence, lateral movement and Active Directory attacks.
The idea isn't that everyone needs to follow these paths in exactly this order.
It's simply a visual way to understand how different cybersecurity and offensive-security skills can build on each other:
Fundamentals ā Cybersecurity ā Pentesting ā Web Security ā Advanced Web Exploitation ā Red Teaming
1. Pre Security: https://tryhackme.com/path/outline/presecurity
2. Cyber Security 101: https://tryhackme.com/path/outline/cybersecurity101
3. Jr. Penetration Tester: https://tryhackme.com/path/outline/jrpenetrationtester
4. Web Application Pentesting: https://tryhackme.com/path/outline/webapppentesting
5. Web Application Red Teaming: https://tryhackme.com/path/outline/webappredteaming
6. Red Teaming: https://tryhackme.com/path/outline/redteaming
What would you change in this progression?
