README.md

Cyber Security Roadmap

Fields

Phase 1: Foundational Skills

S.No	Fields	Description
1	Networking	Foundation for understanding how data moves between systems, including network layers, protocols, IP addressing, and routing.
2	Web Fundamentals	Core of most attack surfaces; covers HTTP/HTTPS, HTML, JavaScript, APIs, databases, and the client-server model.
3	Basic Programming Languages	Learning programming basics in languages like Python, C, or JavaScript to write scripts, automate tasks, and exploit vulnerabilities.
4	Linux	Command-line OS powering most servers, often targeted or used by attackers.
5	Cryptography	The science of securing communication through encryption, hashing, digital signatures, and key management.

Phase 2: Intermediate Skills

S.No	Fields	Description
1	Ethical hacking	Legal hacking to find and report security weaknesses using reconnaissance, exploitation, and reporting techniques.
2	Penetration Testing	Simulated attacks to assess and strengthen security defenses across networks, web apps, and systems.
3	Digital Forecsics	Investigating cyber incidents by collecting, preserving, and analyzing digital evidence from devices, memory, and networks
4	Powershell	Windows scripting for system automation and exploitation.
5	Reverse Engineering	Analyzing compiled software or malware to understand its functionality, discover vulnerabilities, and develop countermeasures.

Virtual Machine (Set These Up Early)

S.No	Fields	Description
1	Virtual Box - Network Chuck	Beginner-friendly guide to installing, configuring, and using VirtualBox for running multiple virtual machines for cybersecurity and IT labs.
2	Virtual Box - David Bombal	Step-by-step tutorial on setting up VirtualBox, creating virtual machines, configuring networking, and integrating with penetration testing tools.
3	Proxmox	Introduction to Proxmox VE, an open-source virtualization platform, covering installation, virtual machine management, and advanced networking.

Learning Platform

S.No	Course Name	Description
1	Try Hack Me	Gamified labs for beginners to advanced. Start with Pre Security, Cyber Security 101 & Junior Penetration Tester paths
2	Hack The Box	Realistic labs; more advanced than THM. Start with "Starting Point".
3	Portswigger Web Security
4	OWASP Juice Shop	Vulnerable web app for practicing web attacks.
5	Over The Wire	CLI-based challenges; great to improve Linux & basic hacking skills.

Cyber Security Frameworks (Understand These Concepts)

S.No	Name	Description
1	OWASP Top 10	Most common web vulnerabilities.
2	MITRE AtTACK Framework	Real-world tactics & techniques used by attackers.
3	CVE	Public list of security flaws.
4	ExploitDB	Database of public exploits and POCs.
5	NIST	US-based standard for cybersecurity best practices.
6	Cyber Kill Chain	Phases of an attack, helps defenders understand attack flow.

Notes & Cheat Sheets (For Quick Revision)

S.No	Name	Description
1	OWASP Cheat Sheets	Simple explanations of web security practices
5	Hack Sheets

Youtube Channels

S.No	Channel Name	Description
1	Network Cuck	Fun, beginner-friendly tutorials on networking, Linux, cybersecurity, coffee-themed hacking, and IT certifications.
2	David Bombal	Fun, beginner-friendly tutorials on networking, Linux, cybersecurity, coffee-themed hacking, and IT certifications.
9	John Hammond	Explores low-level computing concepts, reverse engineering, binary exploitation, and security research in detail.
7	The Cyber Mentor	CTF walkthroughs, reverse engineering tutorials, bug bounty deep-dives, and hacker mindset discussions.
3	Low Level	Bug bounty hunting tips, web security tutorials, exploitation techniques, and vulnerability analysis.
4	LiveOverflow	Ethical hacking, penetration testing tutorials, cybersecurity tools training, and OSCP preparation.
5	Mad Hat	Penetration testing, networking, certification prep (OSCP, CEH), and practical cybersecurity courses.
6	HackerSploit	Short, engaging videos on computer science concepts, cryptography, cybersecurity, and hacking explained for all audiences.
8	Computerphile	CTF challenges, malware analysis, scripting, exploit development, and deep security investigations.
10	PwnFunction	Highly visual, easy-to-follow breakdowns of web hacking concepts, vulnerabilities, and exploitation techniques.

Courses and Certifications

Courses

S.No	Course Name	Description
1	Google Cybersecurity Professional	A beginner-friendly professional certificate covering cybersecurity fundamentals, threat detection, incident response, networking basics, and hands-on labs for entry-level roles.
2	PentesterLab	Practical, hands-on platform for learning web application security through guided exercises, covering vulnerabilities like SQLi, XSS, CSRF, authentication flaws, and more.
3	Application security	A free, structured, web-focused security training program covering secure coding, OWASP Top 10 vulnerabilities, and defensive programming best practices.