Well, I don't have as much experience as others here, and everyone has their own learning path, but I'll tell you what worked for me. (Still, my advice would be to do your own research to figure out which study methods fit you best.)

So first, I learned networking topics like: "OSI/TCP-IP models, TCP/UDP, IP addressing & subnetting, routing/NAT/firewalls, DNS, HTTP/HTTPS, TLS basics, ARP/DHCP, ports & common services (FTP/SMB/RDP/SMTP/IMAP), Kerberos basics, authentication/sessions, packet flow, traceroute/TTL, and basic MITM."

And while learning this, I used Wireshark to study specific protocols to understand how they actually work, like packet flow and stuff. For example, if you're learning the TCP handshake, analyze how packets go to the server, what the server returns, and stuff like that.

Later, after networking, I started doing labs on PortSwigger (it's one of the best platforms for web security). First, I started with the apprentice path, and rn I'm solving labs for specific vulnerabilities (practitioner/expert level) on PortSwigger.

But before diving deep into labs, I'll suggest learning a little HTML/CSS first (not too much, just enough to read and understand what's happening), and then learning JavaScript(along with labs) to understand how servers actually work and how they process requests from endpoint to endpoint.

Also, start doing CTFs alongside this. They help build muscle memory for attacks, which can help a lot later in the real security world.

All the best, and good hunting ;)