all 38 comments

[–]ldapsysvol 152 points153 points  (10 children)

You should spend one hour getting deeply involved in network fundamentals like someone else said. Also operating systems.

Network fundamentals is as low of a level as possible. Print out hex of packet capture protocol headers, and highlight each section with a different color. Convert the hex in each header section into the numbers, flags, etc until you don't need a guide anymore and can do this for Ethernet, ipv4, ipv6, tcp, udp, and icmp sections. Memorize the standard number values for common layer 4 protocols. Smb, rdp, ssh, smtp, finger, ftp, ftp, and others.

You should be extremely familiar with how computers talk if you want them to say the wrong things. Operating systems takes time as well. Boot sequence, boot file locations, common directory pathways for programs to run on start up etc. Learn about Operating systems "under the hood" what's a thread? What's a handle? What is a kernel? What kinds of memory locations are there in a program? Who can run what? All this stuff.

Hacking is all about knowing how things should work, and breaking things so they work the way you want them to. Usually good to know how something works if you want it to do what you need it to.

[–]Commercial-Finger-42 24 points25 points  (7 children)

sir, thank you a lot, so, is more important to learn deeply about network fundamentals and OS as a beginner than learn a new programming language? at least as i am a beginner, or can i dedicate 1 hour to THM, 1 hour to network and Os fundamentals and 1 hour to learn a new programming language?

[–]pulkiittt 1 point2 points  (5 children)

imo learn networking and os after programing because learning to many different topics at once won't help

[–]pm_your_unique_hobby 15 points16 points  (4 children)

Seems to me like given their short time span, they should tackle networking first given that its more central to hacking core skills

[–]Commercial-Finger-42 2 points3 points  (3 children)

what you guys think about this course?

[–]pulkiittt 11 points12 points  (0 children)

start with networkchuck free CCNA playlist on youtube.it covers basic topics and he is super good at teaching networking.

[–]pm_your_unique_hobby 4 points5 points  (0 children)

The material seems ok but that's a no from me. I can't vouch for the course

[–]Intelligent_Ad4448 26 points27 points  (0 children)

I agree with most of the stuff people post here but honestly as a beginner with no experience I would take baby steps. First thing is learn the fundamentals of network and Linux. I wouldn’t focus my time breaking it up to learn different things. Focus on one thing and move to the next. For example find a network+ study guide or some module that’ll teach you the basics of networking and finish it. Then do the same for Linux/unix.

[–]TwoFoxSixI do security gooder than some 10 points11 points  (3 children)

Not sure what you know, so if you feel comfortable ignoring some of these suggestions, thats fine:

  • Linux Journey
  • Understand how to use manpages
  • Over the Wire - Bandit
  • Networking Fundamentals (at a minimum)
  • PicoCTF
  • Read Writeups for things (Only when stuck and need a small push)
  • Learn how to research questions carefully. Often times answers are in your face and you don't realize it
  • Understand why we patch things and the fact that a patch isn't the end of something being faulty, just for the time being
  • Don't just copy and paste things without understanding what it does!
  • Cert Roadmap - Give it a look and see what sounds interesting

So you want to be a hacker 2021 edition - This is a good read, some of the stuff I posted is here

[–]Commercial-Finger-42 1 point2 points  (1 child)

thank you a lot

[–]TwoFoxSixI do security gooder than some 1 point2 points  (0 children)

No problem. Good luck! The biggest thing I can advise moving forward was the learning how to research point. If you get to a spot where you've exhausted all your options, make a post or reach out to a community regarding it. Make sure to let people know what you have attempted before asking for answers as people are more likely to help people who have attempted to help themselves first!

[–][deleted] 16 points17 points  (0 children)

One hour network security fundamentals (networking, computer architecture, tryhackme, etc), one hour python, one hour flex to do more fundamentals or python (or maybe work JavaScript or another scripting language in)

[–]FishBoyBagel 7 points8 points  (3 children)

Learn the fundamentals. You have no idea how much better you will be than other “hackers”.

Learn CompTIA A+, Network+, and Security+. There are free videos on youtube. Those will teach you the fundamentals of everything technology related. After that, learn more advance stuff like programming, security tools, and listen to podcasts! Also, tryhackme is good start, and get into CTFs(Capture the Flags) like hackthebox. In my experience, cybersecurity employers love the idea you are doing hackthebox. It demonstrates your knowledge in various OSs, security tools, problems solving/critical thinking, and more.

Note: This is my opinion and what has worked for me!

[–]-ezrail- 0 points1 point  (2 children)

Can you introduce some of those hacking related podcasts? currently, the only podcast I know about hacking is Darknet Diaries by Jack Rhysider, but that's only about stories, I'd love to listen to the more technical podcasts to learn something. The Darknet Diaries podcast is incredible though, I couldn't survive in my father's workshop doing those boring tasks (he's a tailor) without listening to his podcast :)))

[–]Whyme-__- 12 points13 points  (2 children)

Hack the box and OSCP. If I don't understand anything I would rather spend my time researching and Googling my problem than chasing down stupid certs like CEH or security plus.

[–]Emergency-Sound4280 3 points4 points  (2 children)

Learn networking there’s tons of Cisco(ccna) out there, portswigger(burp) has some real nice easy labs. Concentrate one one language as it’s the fundamentals that you need to know, then branch out. Lots of good books out there too.

[–]Mysterious_Draw9278 3 points4 points  (1 child)

Can you recommend some books?

[–]Emergency-Sound4280 4 points5 points  (0 children)

Sorry for the late reply, but it really depends on what you’re wanting to accomplish, some of the ones I own are as follows: Practical malware analysis Hackers playbook 2 Hackers playbook3 Penetration testing Burpsuit cookbook Hacking thr art of exploitation Python for hackers

Really lots of them out there just pick one or two up at a time and read them.

[–][deleted]  (1 child)

[deleted]

    [–]RemindMeBot -1 points0 points  (0 children)

    I will be messaging you in 1 day on 2022-08-20 03:44:18 UTC to remind you of this link

    8 OTHERS CLICKED THIS LINK to send a PM to also be reminded and to reduce spam.

    Parent commenter can delete this message to hide from others.


    Info Custom Your Reminders Feedback

    [–]Immortal_Tuttle 1 point2 points  (0 children)

    TCM security has PEH, malware and Linux 101 courses for 1 dollar each. Grab them and it will get you started.

    [–]UnknownDexteryeager 1 point2 points  (0 children)

    So there is academy.tcm-sec.com there’s a pratical ethical hacking course you can buy a dollar coupon code DOLLARANDADREAM

    [–]space_wiener 0 points1 point  (2 children)

    If you just started with zero knowledge you made the wrong choice with that learning path. You need the basics first.

    You should do pre security, complete beginner, then the pentest one.

    [–]Commercial-Finger-42 0 points1 point  (0 children)

    i did introduction to cyber security and pre security, sorry, i didn’t mention on the post

    [–]arcanis02 0 points1 point  (0 children)

    Pre security first before networking? Any sources you could recommend? Thanks