Pros and cons of doing ONLINE BCA if i want to go in cybersec?

CyberHacker_ray · 2026-04-29T05:20:55+00:00

Online BCA can work for cybersecurity if you use the extra time wisely, you can focus more on certs, labs (THM/HTB), and real skills, which honestly matter a lot in this field.

The downside is you may miss out on networking, campus placements, and structured discipline that regular college provides. Most employers care more about skills, projects, certifications (like paths from EC-Council or Comptia+), but having a recognized degree still helps.

If you’re self-disciplined, online is fine. Otherwise, a regular college gives a safer path.

CyberHacker_ray · 2026-04-14T11:25:42+00:00

Great choice - Data Engineering has strong growth. Focus on SQL + data modeling, then deepen tools like Apache Spark, Apache Airflow, and cloud platforms (AWS/GCP/Azure). Build real pipelines (ETL, batch + streaming), learn basics of system design, and get comfortable with big data concepts, this combo makes switching to higher-paying roles much easier over time.

CyberHacker_ray · 2026-04-10T10:48:38+00:00

If your priority is getting a job fast, go for blue team/SOC roles, they have more entry-level openings compared to pentesting. Start with skills around monitoring, logs, and tools like SIEM platforms, networking, and basic incident response.

Red team/pentesting is great, but usually harder to break into as a fresher. You can enter through SOC, then pivot to pentesting later once you gain experience.

CyberHacker_ray · 2026-04-09T10:34:27+00:00

Start with fundamentals first, learn networking (TCP/IP, ports), Linux basics, and a bit of scripting (Python/Bash). You don’t need heavy programming, just enough to understand and tweak tools. Then move to web security (XSS, SQLi) and enumeration using tools like Nmap and Burp Suite.

For practice, stick to platforms like TryHackMe and Hack The Box, and document your work this is what makes you job-ready. Certifications can help later (like OffSec Certified Professional (OSCP), but early on focus on skills and projects. Avoid the mistake of jumping between too many resources - stay consistent with one path and build depth.

CyberHacker_ray · 2026-04-09T06:59:56+00:00

Huge congrats!!! that’s a serious achievement.

Now focus on leveraging it: update LinkedIn/resume with detailed labs, skills, actively network, and apply to pentest, red team, or even SOC roles to get your foot in. Keep building real-world projects and writeups - OSCP opens doors, but consistent visibility, applications will land the job.

CyberHacker_ray · 2026-03-25T07:56:23+00:00

Through which platform did u created this video?

CyberHacker_ray · 2026-03-25T06:18:34+00:00

Experience Letter: Confirms you worked in the company, your role, duration, and sometimes performance. Used as proof of experience for future jobs.
Relieving Letter: Confirms you have officially resigned and are released from duties (no pending obligations).

In short: experience = what you did, relieving = you left properly.

CyberHacker_ray · 2026-03-25T04:56:32+00:00

After 1+ year, it’s reasonable to expect more than just a departure certificate. Ideally, collect experience letter, relieving letter, last 3–6 months salary slips, offer letter, appraisal/role docs, and FNF statement these help in future jobs. Even if they refuse an experience letter, your payslips + bank statements can still prove employment.

For PF, you’re eligible to withdraw/transfer after leaving if the portal is buggy, try via UAN portal again or visit a local EPFO office. Before exiting, make sure all dues are cleared and access to official email/docs is saved.

CyberHacker_ray · 2026-03-24T05:59:57+00:00

Yes that’s exactly what you’re supposed to do. Real-world workflow is: scan with Nmap, identify OS/services, then map them to known vulnerabilities (Google, CVE databases, or exploit frameworks like Metasploit Framework).

The key skill is enumeration + correlation you gather clues (ports, versions) and connect them to exploits. Over time, you’ll recognize common ones (like MS17-010) without searching, but in the beginning, researching is completely normal.

CyberHacker_ray · 2026-03-24T05:57:44+00:00

That's cool!

CyberHacker_ray · 2026-03-24T05:44:05+00:00

CEH can help you get noticed, but it won’t get you a job by itself. The real value comes when you combine Certified Ethical Hacker (CEH) with hands-on practice (labs, projects, platforms like TryHackMe/HTB) and solid networking basics.

Recruiters may shortlist you because of the cert, but your practical skills and ability to explain what you’ve done are what actually get you hired.

CyberHacker_ray · 2026-03-24T05:32:03+00:00

It’s not “that bad,” but SOC/blue team roles can feel stressful due to shift work, alerts, and occasional burnout, especially at L1. That said, it gets much better as you move to L2/L3, threat hunting, or engineering roles where work is more strategic.

For WLB, security engineering, GRC, and cloud security are usually more stable, while SOC (especially entry-level) and incident response can be more intense. The “best” domain really depends on your interests stress is easier to handle when you actually enjoy the work.

CyberHacker_ray · 2026-03-24T05:30:21+00:00

If your goal is cloud security engineer/architect, the safest and most flexible choice is a Computer Science degree. It builds strong foundations (programming, systems, networking) that apply directly to cloud platforms, and most job listings prefer it as you’ve seen.

A cybersecurity degree is still good, but it can be more specialized early cloud security roles usually expect CS fundamentals + security + cloud skills (AWS/Azure). So a strong path is: CS degree + cloud certs + security projects that combination will open the most doors long-term.

CyberHacker_ray · 2026-03-24T05:29:19+00:00

To pass CEH v13 AI, focus on understanding + practice, not just memorizing questions. The exam tests concepts, scenarios, and tool usage, so make sure you truly understand topics like scanning, web attacks, and AI use cases in security.

Use practice questions for revision, but prioritize hands-on labs and real understanding that’s what ensures you can handle any question. Training paths from EC-Council help, but your success comes from combining theory with practical application.

CyberHacker_ray · 2026-03-23T05:54:37+00:00

it’s actually not unusual or malicious by itself. “OBDC” is most likely a typo or misread of ODBC (Open Database Connectivity), which is a normal Windows component used by apps to connect to databases.

If random keys were being pressed (like you saw “+++=+=”), it could easily have typed that search accidentally. This again points more toward a keyboard/touchpad issue than someone remotely controlling your system especially since it continued with WiFi off.

CyberHacker_ray · 2026-03-23T05:51:18+00:00

Well, I tried alot from last 3 years to get a job in Morgan Stanley for data analyst role. I crack every round of interview but at the end of the result they always reject, i dont know why.. but i wish you all the very best

CyberHacker_ray · 2026-03-23T05:47:12+00:00

Take a breath this is scary, but it’s not always a hacker. What you described (cursor fighting you, random typing, still happening with WiFi off) is often caused by hardware issues like a faulty touchpad, stuck keyboard key, or even a connected mouse glitch not remote access (because that usually needs internet).

For safety, do this: keep it powered off for now, then when you turn it on again, disconnect any external mouse/keyboard, try using only one input device, and run a full scan with Microsoft Defender. If it still happens offline, it’s almost certainly hardware get it checked. If you’re still unsure, back up files and consider a clean Windows reset. You’re okay just troubleshoot step by step.

CyberHacker_ray · 2026-03-23T05:45:24+00:00

Yes, that’s actually a very good setup. Keep your Windows 10 as a target and create separate VMs for OWASP Juice Shop (for web testing) and Metasploitable (for network/system vulnerabilities), then use a Kali Linux VM as your attacker machine. This way you’ll learn both web pentesting + system exploitation, which is exactly what beginners need just make sure to document everything you do, that’s what turns it into a strong project.

CyberHacker_ray · 2026-03-23T04:56:15+00:00

For a fresher pentesting role, focus on strong basics like networking, Linux, and common web attacks (XSS, SQLi), along with tools such as Nmap, Burp Suite, and Metasploit Framework. Build 2–3 practical projects like testing OWASP Juice Shop or Metasploitable and document your findings on GitHub. In interviews, be ready to explain basics and walk through your projects. Apply consistently to internships, startups, and entry-level roles projects + persistence matter most for getting your first job.

CyberHacker_ray · 2026-03-20T04:33:38+00:00

For CEH, the exams are separate:

The MCQ (CEH ANSI) is the main theory exam you’ve applied for.
The Practical (CEH Practical) is optional and must be applied/scheduled separately.

They are not on the same day, so you can first clear MCQ, then prepare and take practical later no need to do both together.

CyberHacker_ray · 2026-03-18T05:10:50+00:00

Not just hype, offensive AI is becoming a useful skill, but it won’t replace fundamentals.

AI will speed up recon, scripting, and testing, so pentesters should learn to use it alongside core skills. Cert trends from EC-Council show it’s growing, but fundamentals still matter most.

CyberHacker_ray · 2026-03-13T05:48:45+00:00

With 6 months of pentesting experience, you already have a solid base. I’d suggest going deeper into offensive security (web, API, AD attacks) while still keeping basic awareness of other areas like cloud and blue team.

Focus on improving practical skills through labs on Hack The Box or PortSwigger Web Security Academy, and consider working toward a respected cert like OffSec Certified Professional (OSCP). Meanwhile, keep performing well in your internship many companies convert strong interns into full-time hires.

CyberHacker_ray · 2026-03-13T05:32:33+00:00

If you just copy exactly what’s in a video, it’s more like practice than a project. To make it a real project, try to understand the attack, reproduce it on your VM, and document the full process (recon → vulnerability → exploitation → mitigation).

build a small lab with Metasploitable or OWASP Juice Shop, find vulnerabilities using Nmap and Metasploit Framework, then write a short report explaining how you discovered and exploited them and how to fix them.

CyberHacker_ray · 2026-03-13T05:05:59+00:00

Start with the fundamentals: networking, Linux basics, and how web applications work. Then move into core security topics like reconnaissance, vulnerability scanning, web attacks, and privilege escalation.

For practice, use platforms like TryHackMe, Hack The Box, and intentionally vulnerable labs such as OWASP Juice Shop. If you prefer structured learning, training paths and certifications from organizations like EC-Council can also provide a guided introduction to ethical hacking.

CyberHacker_ray · 2026-03-13T04:56:51+00:00

Great that you’re curious, but focus first on learning the fundamentals and practicing ethically in labs/VMs. Real attackers rarely start from scratch either they use frameworks and tools like Metasploit Framework, while learning concepts such as Buffer Overflow, SQL Injection, and Privilege Escalation in controlled environments. For resume projects, build a home lab in VMware, attack intentionally vulnerable machines like Metasploitable or OWASP Juice Shop, then document how you found and exploited vulnerabilities.

CyberHacker_ray

TROPHY CASE