Guide: Getting Started

How to Start

There is no "best way" to start learning how to hack however, a basic understanding of not only computers but also the networks themselves is very important to learning the core mechanics of cyber security.

The way I started was by first taking the Junior Cybersecurity Analyst Job Role Path on HTBAcademy. If you want to do it for free then just do the modules that say Tier 0, as long as you complete them you gain your credits back for the class to use for another one.

Description of Image

These courses teach you the basics of networking and different Operating Systems (OS) before slowing easing you into basic hacking techniques and methods.

Once you complete at least all the T0 moduels I recommend the CyberSecurity 101 course on TryHackMe. Followed by Web Fundamentals and then the Web Application Pentesting course. These 3 courses will solidify the basics of your hacking knowledge and teach you techniques to be a Bug Bounty Hunter, the most common way to make money while hacking that isnt a 9 to 5 office job.

Description of Image Description of Image Description of Image

Once you are complete with those it's time to get into the details, go to PortSwigger Academy and check our their Web Academy Learning Paths. Start with the Server Side Vulnerabilities path and after that just chose which path sounds cool. My recommendations are API Testing, SQL Injection, Race Conditions, File Upload Vulnerabilities, and Cross Site Scripting. Each of these paths are new tools on your hacker toolbelt you can use against websites to hunt for bugs.

Description of Image

When you feel good about your new tools, make an account on HackerOne and start reading the reports. Those are real hackers who hacked into company websites and got paid, read how they did it and what tools they used. Try and search for any reports that find XSS, IDORs, or SSRF. Those tend to be the easiest things exploit for beginners.

While you're there go ahead and start on some of the CTFs there as well, you become eligable for private bug hunter oppertunites if you can score enough points. CTFs are great fun and good to keep you on your toes and learning if you start feeling burned out, as well as programs like Juice-Shop, and Wire Bandit.