From Playing Games to Breaking Systems: My Journey Through Practical Ethical Hacking (PEH)

My journey into cybersecurity didn't happen overnight.

It started with playing games, grew into coding products, and gradually led me towards network enumeration, network penetration testing, Active Directory, and web application penetration testing.

The more I learned, the more curious I became about how systems work, how they break, and how we can fix them.

Recently, I completed TCM Security's Practical Ethical Hacking (PEH) course and received my course completion certificate. Here's what the experience taught me.

Enumeration Changed My Perspective

One of my biggest takeaways was understanding the importance of enumeration.

Penetration testing isn't simply about memorising commands or running tools. It's about understanding the target, gathering information, interpreting findings, and deciding what to investigate next.

I realised that a methodology is essential, but it isn't a rigid checklist that works identically everywhere.

A methodology gives you direction, but your findings determine your next move.

Whether you're assessing a machine, a network, or a web application, understanding the environment is fundamental to making informed decisions.

Active Directory: The Real Challenge 😭

Honestly, Active Directory and lateral movement challenged me the most.

There was a lot I struggled to understand, and I had to revisit enumeration multiple times. But those repeated attempts gradually helped me recognise patterns and make better sense of what I was investigating.

Finding NTLM hashes and tickets during the training labs felt like meaningful milestones.

I haven't mastered Active Directory, and I'm not going to pretend otherwise. I still need plenty of practice.

Web application penetration testing is another area where I want to become much more confident.

Notes, Practice, Repeat

Throughout the course, I relied on notes, cheat sheets, blogs, and GitHub write-ups documenting different techniques and methodologies.

These resources helped me revisit concepts and explore alternative explanations. But reading about a technique and applying it independently are two different things.

Repeated hands-on practice is what I need to prioritise next.

This Is Just the Beginning

PEH taught me more than individual techniques. It encouraged me to think more methodically, investigate before acting, and adapt my approach to the target.

My next steps are to strengthen my Active Directory and web application penetration testing skills, build practical projects, pursue further certifications, and keep learning offensive security.

If you're beginning your own cybersecurity journey, focus on understanding why something works, not just how to execute it. Take notes, practise repeatedly, and don't be discouraged when a concept takes several attempts to click.

One training completed. Countless skills to master. 🔥 The journey continues. And I'm just getting started.

#Cybersecurity #PenetrationTesting #EthicalHacking #TCMSecurity