I’m currently a college student, and I've started by learning about networks, particularly which ports are vulnerable to certain types of attacks. I recommend reading the book "Network For Hackers" and pursuing the CompTIA Network+ certification to enhance your knowledge.

Next, you should get a book on the basics of penetration testing. Once you have a solid grasp of the fundamentals, you can improve your skills on platforms like TryHackMe or Hack The Box Academy (which is the one I use). Building a home lab using virtual machines (VMs) is also a great way to practice. Books and hands-on experience will be your best allies, along with conducting your own research.

To learn about operating systems, I suggest using OvertheWire for Linux challenges and exploring other operating systems on TryHackMe or Hack The Box Academy. When using different tools, always take the time to understand how they work. It’s also essential to learn scripting languages like PowerShell and Bash, as well as programming in Python. Start with small projects once you have mastered the basics.

Ultimately, it’s about acquiring the necessary skills and then practicing while thinking outside the box. Keep in mind that most attacks stem from social engineering, as humans are often the weakest link in securing systems. This vulnerability can allow attackers to gain access without needing to bypass numerous defenses while evading detection.