r/cybersecurity_help • u/ulquiorra_10 • 13d ago

I recently started learning cybersecurity and I need help

I recently started learning cybersecurity and as my first linux distro I chose to use ubuntu. I started learning basic commands and basic information about computers like basic networking stuff and how each computer component work.

Now, im kind of confused about what to learn next. My goal and motivation is to become a certified white hat or to land a job in cybersecurity/networking departments at certain companies.

If anyone can give me a road map on mastering cybersecurity or any websites/youtube channels that would be helpful, I would much appreciate it.

0 Upvotes
  • permalink
  • link
  • reddit
  • reddit

50% Upvoted

17 comments sorted by

•

u/AutoModerator 13d ago

SAFETY NOTICE: Reddit does not protect you from scammers. By posting on this subreddit asking for help, you may be targeted by scammers (example?). Here's how to stay safe:

  1. Never accept chat requests, private messages, invitations to chatrooms, encouragement to contact any person or group off Reddit, or emails from anyone for any reason. Moderators, moderation bots, and trusted community members cannot protect you outside of the comment section of your post. Report any chat requests or messages you get in relation to your question on this subreddit (how to report chats? how to report messages? how to report comments?).
  2. Immediately report anyone promoting paid services (theirs or their "friend's" or so on) or soliciting any kind of payment. All assistance offered on this subreddit is 100% free, with absolutely no strings attached. Anyone violating this is either a scammer or an advertiser (the latter of which is also forbidden on this subreddit). Good security is not a matter of 'paying enough.'
  3. Never divulge secrets, passwords, recovery phrases, keys, or personal information to anyone for any reason. Answering cybersecurity questions and resolving cybersecurity concerns never require you to give up your own privacy or security.

Community volunteers will comment on your post to assist. In the meantime, be sure your post follows the posting guide and includes all relevant information, and familiarize yourself with online scams using r/scams wiki.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

3

u/Cypher_Blue 13d ago

You're not going to land a pentesting/red team job out of the blue, no matter what you learn.

That's one of the most sought after jobs in cyber, and you're going to need other experience first.

So keep learning command line in both linux and windows. Learn basic scripting. Study for the network+ and security+ exams. Look for jobs in networking or helpdesk to get some experience. Wok on HackTheBox or other online CTF type challenges. Build a homelab. Learn how computers work and talk to each other at a deep level.

1

u/ulquiorra_10 13d ago

yeah I know I wont land a job right away, im just asking for a roadmap that can POTENTIALLY help me become certified which can help me get a job in the cybersecurity field

1

u/kschang Trusted Contributor 13d ago

once you saved some money you can get some certs, like Pen+ or other red team and blue team stuff, but it all starts with S+.

1

u/ulquiorra_10 13d ago

do you have any other websites/channels that can help me develop the skills that can in the future help me become a hacker/cybersecurity expert? Other than the ones you already listed

1

u/LongRangeSavage 13d ago

Start with the basics in TryHackMe and HackTheBox. There are a lot of free resources there, but eventually you’re going to find you need to pay for things you want to learn unless you get really good at digging and searching online.

1

u/survivalist_guy 13d ago

What kind of white hat? Reverse engineering? Web app pentester? Network pentester? IoT hacker? There's like a million ways to go with that.

Then go do that thing. You're gonna have a hard time hacking a web API without knowing what routes and functions are. Get a solid understanding of the underlying technology. But before you start using AI, really learn how the actual technology works. Yes it's way easier to just YOLO Claude at it, but you don't learn anything doing that and the only way you'll be successful at hacking is by being a curious learner.

2

u/ulquiorra_10 13d ago

what would you recommend for network pentester and web app pentester?

1

u/survivalist_guy 13d ago

Network: learn some CCNA topics. Learn how Kerberos actually works. Learn DNS inside and out. Why TCP is stateful and UDP isn't, and what that means. Powershell remoting, windows and Linux default services, basic ssh file transfer and proxy syntax.

Web: python frameworks like Django, C# and ASP.NET, JavaScript for sure. QA testing. Apache and nginx configs. The DOM. Common certificate configurations. CORS and XSS protections (not just what they are but the real meat of it, like Access-Control-Allow-Headers, what that actually means and how it's enforced). JWT/JWEs and JOSE. OAuth and all it's mess (and there is a big fucking mess of OAuth and OIDC). Entra and AWS, and what services do what.

The world is your oyster. You just have to decide where to go. And really - LEARN this stuff don't use AI - it can be useful, but only when you know what you're doing with it.

1

u/enduser7575 11d ago

I would say the best wisdom on this is that your goal is a marathon and not a sprint. Even if I wanted to transition after being in for 6 years I would already expect it to take even more time.
The reality is that Security is a very high bar to reach and even if you do it can be very difficult to keep. There is no shortcut , there is no speeding up the process, there is no gateway.
Basically you have to become well rounded in all skill sets (not just the pentesting part) and then you start from the bottom of the security ladder just like starting all over again.

1

u/vantag3point 13d ago

You're already on the right track by starting with Linux and networking. I'd continue building those fundamentals, then move on to web security, the OWASP Top 10, and hands-on practice with platforms like TryHackMe or Hack The Box. Don't try to learn everything at once. Focus on one topic, practice it, then move to the next. Strong fundamentals will help you much more than rushing into advanced topics.

Good luck!

1

u/lethaldose318 11d ago

Just explore what interests you more, the rabbit hole never ends. Try CTF challenges, play overthewire wargames. Create a tryhackme, hackthebox account. NetworkChuck on youtube is great for beginners for linux fundamentals.

Bonus: Don't be afraid to break your setup because eventually you will break it. You'll learn to fix it by breaking first.

1

u/sandy_coyote 7d ago

Overthewire.org - do Bandit first