To learn ethical hacking, focus on foundational knowledge like networking and Linux, utilize hands-on platforms such as TryHackMe and Hack The Box, and consider certifications like OSCP for career advancement.

Foundational Knowledge

• Networking is crucial: Many Redditors emphasize a strong understanding of networking as the basis for any IT job beyond help desk, and ethical hacking heavily relies on it. "Learn networking first, read/watch Network+ or CCNA material."

• Master Linux: A significant portion of ethical hacking work is performed in the Linux terminal, making proficiency essential. "Next you need to know linux. Most of your time as a hacker will be spent in the linux terminal, so you are going to know how to navigate it."

• Learn a Programming Language: Python is frequently recommended due to its ease of learning and utility in hacking. "Black hat python ( why python? Because it's easy to learn)"

Hands-on Practice Platforms

• TryHackMe and Hack The Box are highly recommended: These platforms offer beginner-friendly courses and labs to practice ethical hacking skills. "I think the TryHackMe courses are pretty good for getting your hands dirty and getting an idea of what's out there and how it works."

• OWASP Juice Shop: This intentionally vulnerable web application is excellent for practicing web application security. "For practice, use platforms like TryHackMe, Hack The Box, and intentionally vulnerable labs such as OWASP Juice Shop."

• PortSwigger Academy: If you are more interested in web security, PortSwigger is a valuable resource. "If you’re more into web stuff you should check out PortSwigger and Pentesterlabs."

Recommended Certifications

• OSCP is the industry standard: The Offensive Security Certified Professional (OSCP) is widely recognized as the go-to certification for those seeking a job in the field. "The defacto cert for anyone interested in getting a job is the OSCP."

• CompTIA Certifications: For strong foundational knowledge, consider the CompTIA Trifecta (A+, Network+, and Security+), though some suggest going straight to Security+ or CySA+. "If you’re serious, start with the CompTIA Trifecta (A+, Network+ and Security+)."

• Avoid CEH for practical skills: While the CEH (Certified Ethical Hacker) theory exam covers some basics, many Redditors feel it doesn't offer enough practical, hands-on experience for its cost. "Also C.E.H. theory exam is a waste of time and money. Dont do it."

Are you looking for more resources on a specific area within ethical hacking?

Related Media

Ethical Hacking Communities