Skip to content

SIT-Cyber-Blockchain-Club/Cyber_Security_Roadmap

Repository files navigation

Cyber Security Roadmap

Fields

Phase 1: Foundational Skills

S.No Fields Description
1 Networking Foundation for understanding how data moves between systems, including network layers, protocols, IP addressing, and routing.
2 Web Fundamentals Core of most attack surfaces; covers HTTP/HTTPS, HTML, JavaScript, APIs, databases, and the client-server model.
3 Basic Programming Languages Learning programming basics in languages like Python, C, or JavaScript to write scripts, automate tasks, and exploit vulnerabilities.
4 Linux Command-line OS powering most servers, often targeted or used by attackers.
5 Cryptography The science of securing communication through encryption, hashing, digital signatures, and key management.

Phase 2: Intermediate Skills

S.No Fields Description
1 Ethical hacking Legal hacking to find and report security weaknesses using reconnaissance, exploitation, and reporting techniques.
2 Penetration Testing Simulated attacks to assess and strengthen security defenses across networks, web apps, and systems.
3 Digital Forecsics Investigating cyber incidents by collecting, preserving, and analyzing digital evidence from devices, memory, and networks
4 Powershell Windows scripting for system automation and exploitation.
5 Reverse Engineering Analyzing compiled software or malware to understand its functionality, discover vulnerabilities, and develop countermeasures.

Virtual Machine (Set These Up Early)

S.No Fields Description
1 Virtual Box - Network Chuck Beginner-friendly guide to installing, configuring, and using VirtualBox for running multiple virtual machines for cybersecurity and IT labs.
2 Virtual Box - David Bombal Step-by-step tutorial on setting up VirtualBox, creating virtual machines, configuring networking, and integrating with penetration testing tools.
3 Proxmox Introduction to Proxmox VE, an open-source virtualization platform, covering installation, virtual machine management, and advanced networking.

Learning Platform

S.No Course Name Description
1 Try Hack Me Gamified labs for beginners to advanced. Start with Pre Security, Cyber Security 101 & Junior Penetration Tester paths
2 Hack The Box Realistic labs; more advanced than THM. Start with "Starting Point".
3 Portswigger Web Security
4 OWASP Juice Shop Vulnerable web app for practicing web attacks.
5 Over The Wire CLI-based challenges; great to improve Linux & basic hacking skills.

Cyber Security Frameworks (Understand These Concepts)

S.No Name Description
1 OWASP Top 10 Most common web vulnerabilities.
2 MITRE AtTACK Framework Real-world tactics & techniques used by attackers.
3 CVE Public list of security flaws.
4 ExploitDB Database of public exploits and POCs.
5 NIST US-based standard for cybersecurity best practices.
6 Cyber Kill Chain Phases of an attack, helps defenders understand attack flow.

Notes & Cheat Sheets (For Quick Revision)

S.No Name Description
1 OWASP Cheat Sheets Simple explanations of web security practices
5 Hack Sheets

Youtube Channels

S.No Channel Name Description
1 Network Cuck Fun, beginner-friendly tutorials on networking, Linux, cybersecurity, coffee-themed hacking, and IT certifications.
2 David Bombal Fun, beginner-friendly tutorials on networking, Linux, cybersecurity, coffee-themed hacking, and IT certifications.
9 John Hammond Explores low-level computing concepts, reverse engineering, binary exploitation, and security research in detail.
7 The Cyber Mentor CTF walkthroughs, reverse engineering tutorials, bug bounty deep-dives, and hacker mindset discussions.
3 Low Level Bug bounty hunting tips, web security tutorials, exploitation techniques, and vulnerability analysis.
4 LiveOverflow Ethical hacking, penetration testing tutorials, cybersecurity tools training, and OSCP preparation.
5 Mad Hat Penetration testing, networking, certification prep (OSCP, CEH), and practical cybersecurity courses.
6 HackerSploit Short, engaging videos on computer science concepts, cryptography, cybersecurity, and hacking explained for all audiences.
8 Computerphile CTF challenges, malware analysis, scripting, exploit development, and deep security investigations.
10 PwnFunction Highly visual, easy-to-follow breakdowns of web hacking concepts, vulnerabilities, and exploitation techniques.

Courses and Certifications

Courses

S.No Course Name Description
1 Google Cybersecurity Professional A beginner-friendly professional certificate covering cybersecurity fundamentals, threat detection, incident response, networking basics, and hands-on labs for entry-level roles.
2 PentesterLab Practical, hands-on platform for learning web application security through guided exercises, covering vulnerabilities like SQLi, XSS, CSRF, authentication flaws, and more.
3 Application security A free, structured, web-focused security training program covering secure coding, OWASP Top 10 vulnerabilities, and defensive programming best practices.

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors