Wondering how to get started in hacking?
Harley’s list of recommended resources for beginners can be found below. While all of these resources are great on their own merit, it’s important that hackers reflect on what type of hacking is most interesting to them. For a complete beginner that doesn’t know what path to take, I would recommend dabbling in everything until you learn what interests you most, and then dive deeper into training materials related to that niche.
Web Hacking
- Hacker101
- Portswigger Web Academy
- Pentesterlab
- TryHackMe
- Hack The Box
- Hack The Box & HackerOne’s Bug Bounty Learning Path
- OWASP Juice Shop
Pentesting Certifications
- Offensive Security – OSCP
- eLearnSecurity – eCCPT
- eLearnSecurity – eWPT
- TCM Security – PNPT
- EC-Council – CEH (Practical)
Jr Pentesting Certifications
YouTube / Twitch Channels:
- @insiderphd
- @BugBountyReportsExplained
- @infinitelogins
- @nahamsec
- @stok
- @liveoverflow
- @thecybermentor
- @ippsec
Podcasts:
Blog Posts:
- Ten Rules to be Successful in Your Bug Bounty Career – Ariel Garcia
- 100 Hacking Tools and Resources – HackerOne
- Hacker Education Resources – HackerOne
- Free Bug Bounty Resources Thread – @ITSecurityguard
- A View From the Other Side: A Security Analyst’s Perspective on Bug Bounty