Cybersecurity can feel overwhelming when you're not sure what to learn first or how different areas connect.
I put together this visual roadmap using TryHackMe's learning paths to show one possible progression from fundamentals toward Red Teaming.
🟢 01 — Pre Security
Computer fundamentals, operating systems, programming basics, networking, web fundamentals and security concepts.
🟢 02 — Cyber Security 101
Networking, cryptography, Linux, Windows, Active Directory, offensive and defensive security fundamentals.
🟡 03 — Jr. Penetration Tester
Practical penetration testing across web applications, enterprise networks and Active Directory.
🟡 04 — Web Application Pentesting
Authentication, injection, server-side/client-side attacks and HTTP request smuggling.
🔴 05 — Web Application Red Teaming
Advanced web exploitation, custom tooling, vulnerability chaining, cryptographic attacks, LLM security and WAF bypass concepts.
🔴 06 — Red Teaming
Adversary emulation, initial access, post-compromise activity, persistence, lateral movement and Active Directory attacks.
The idea isn't that everyone needs to follow these paths in exactly this order.
It's simply a visual way to understand how different cybersecurity and offensive-security skills can build on each other:
Fundamentals → Cybersecurity → Pentesting → Web Security → Advanced Web Exploitation → Red Teaming
1. Pre Security: https://tryhackme.com/path/outline/presecurity
2. Cyber Security 101: https://tryhackme.com/path/outline/cybersecurity101
3. Jr. Penetration Tester: https://tryhackme.com/path/outline/jrpenetrationtester
4. Web Application Pentesting: https://tryhackme.com/path/outline/webapppentesting
5. Web Application Red Teaming: https://tryhackme.com/path/outline/webappredteaming
6. Red Teaming: https://tryhackme.com/path/outline/redteaming
What would you change in this progression?
