A Beginner’s Guide to step into Cybersecurity —

1: Foundation -

• Networking Basics:https://www.geeksforgeeks.org/computer-networks/computer-network-tutorials/
• Linux Fundamentals: https://www.geeksforgeeks.org/linux-unix/linux-tutorial/
• Programming: Python, Bash scripting basics https://www.w3schools.com/python/python_intro.asp https://www.w3schools.com/bash/
• Web Technologies: HTML, CSS, JavaScript, databases(SQL,NONSQL) https://www.geeksforgeeks.org/web-tech/web-technology/
• Security Fundamentals: https://www.w3schools.com/cybersecurity/ https://owasp.org/www-project-top-ten/ https://www.geeksforgeeks.org/computer-networks/cryptography-and-network-security-principles/

3: Some Security Tools for -

Reconnaissance

• Nmap — https://nmap.org/book/man.html — Network mapping and host discovery
• Osint Framework — https://osintframework.com/ -OSINT and reconnaissance
• theHarvester — https://www.kali.org/tools/theharvester/ — Email/subdomain gathering
• Shodan — https://www.shodan.io/ — Search engine for device discovery and information gathering
• Wireshark,tshark — https://www.wireshark.org/docs/ — Network scanning

Vulnerability Scanning

• Nessus — https://www.tenable.com/products/nessus/
• OpenVAS — https://www.openvas.org/
• Nikto — https://www.kali.org/tools/nikto/
• Burp Suite Community — https://portswigger.net/burp/
• ZAP — https://www.zaproxy.org/getting-started/

Exploitation

• Metasploit Framework — https://www.metasploit.com
• SQLmap — https://github.com/sqlmapproject/sqlmap
• John the Ripper — https://www.kali.org/tools/john/
• Hashcat — https://hashcat.net/hashcat/
• Hydra — https://www.kali.org/tools/hydra/

Post-exploitation

• LinPEAS: https://github.com/carlospolop/PEASS-ng/tree/master/linPEAS
• WinPEAS: https://github.com/carlospolop/PEASS-ng/tree/master/winPEAS
• Sherlock: https://github.com/rasta-mouse/Sherlock
• Gtfobins: https://gtfobins.github.io
• pspy: https://github.com/DominicBreuker/pspy

4: Hands-On Labs

1. TryHackMe — https://tryhackme.com

https://github.com/Hunterdii/TryHackMe-Roadmap

2. HackTheBox Academy — https://academy.hackthebox.com

https://github.com/darth-web/HackTheBox

3. PortSwigger Web Security Academy - https://portswigger.net/web-security

4. PentesterLab - https://pentesterlab.com

5. VulnHub - https://www.vulnhub.com

Practice CTF Platforms

1. PicoCTF - https://picoctf.org/index.html#picogym

2. OverTheWire - https://overthewire.org/wargames/bandit/

3. Root Me - https://www.root-me.org

Essential Blogs

1. PortSwigger Research - https://portswigger.net/research

2. OWASP - https://owasp.org/www-community

3. Null Byte - https://null-byte.wonderhowto.com

4. PentestMonkey - https://pentestmonkey.net

7. 0xRick's Blog - https://0xrick.github.io

Writeup Resources

• HackTheBox Writeups: Search on Medium
• TryHackMe Writeups: Search on Medium
• GitHub: Search for "CTF writeups" or specific challenges