Welcome to All Visitors
🌍 If English is not your native language...
- Videos:
- You may wish to slow down the video speed and enable subtitles (if available), as some of the speakers may talk a bit quickly.
- Text:
- While not perfect, you may wish to use a translation service to clarify any points that you may be stuck on
Recommended Learning Path for Beginners
A Word of Encouragement
✅ NOBODY is born with knowledge of any of this material. The amount of skill is a reflection of hours + effort. Everyone starts at zero.
✅ If you encounter someone very skilled, they've been practicing a long time. They didn't acquire their skills overnight, I can promise you.
✅ Everyone learns differently, and at different speeds. Find the resources that will help you succeed, whether that's on this page or somewhere else.
📢 You DO NOT need to be an expert in every single knowledge domain listed below! The idea is to build confidence across a broad spectrum of knowledge.
❗ There are no shortcuts! If you try to take shortcuts, you will eventually find yourself later trying to fill knowledge gaps. Take the time now to build a solid foundation.
💡 Learning new things is a slow process, but is well worth the time. It's completely normal to feel overwhelmed at first. Take it in small chunks and things will start making more sense as you progress.
💡 I would encourage you to seek out a mentor or a community of your peers. It is an immense help to have others to learn from and learn with. It's not a zero-sum game, we all give and take to and from each other.
Systems Administration
1. Foundational Knowledge
This is a series of brief videos that will introduce you to the technical metamorphosis of computers and their various parts. Very good stuff!
Operating Systems (13:35)
Memory & Storage (12:16)
Files & File Systems (12:02)
Command Line Interfaces (11:23)
Graphical User Interfaces (12:58)
2. Interactive Introduction to Computer Systems
Go through a gamified and engaging series of lessons that will introduce you to the hardware and software aspects of computer systems.
3. Systems Administration Crash Course by Google
Learn to Manage Linux and Windows via the command Line (Playlist)
Learn to Manage Common Services on Linux and Windows Servers (Playlist)
4. Introduction to Virtual Machines and VirtualBox
15:34
5. If You Want to Go Further...
Professor Messer's A+ Videos
Please Note!
This is not a recommendation to get the certification unless needed for a job! You can just watch the videos. I linked the Professor Messer A+ content, because it will introduce you to:
- Hardware concepts
- Operating systems concepts
- Troubleshooting methodology (which is useful to build analytical skills)
Professor Messer's A+ Training Course Part 1
Professor Messer's A+ Training Course Part 2
Computer Networking
1. Foundational Knowledge
Here you will be introduced to the history and metamorphosis of the technology that makes up computer networks and the larger Internet.
Computer Networking Crash Course (12:19)
The Internet — A network of networks (11:57)
2. Complete Networking Course by Google
Complete Networking Course Covering All the Fundamentals (Playlist)
3. Hands-On Networking Labs with GNS3
University of the PacificI'd recommend doing the lab in this order as some of the concepts may be difficult for complete beginners:
- Steps 1, 2, 3
- Then, steps 6, 7, 8, 9
If you're feeling ambitious, you could do the entire lab, but there are some concepts that may be best saved for later.
4. If You Want to Go Further...
Professor Messer's Network+ Videos
Please Note!
This is not a recommendation to get the certification unless needed for a job! The networking course by Google linked above should cover almost everything you need to know.
Web
1. Foundational Knowledge
Here, you will be introduced to the history and metamorphosis of the technology that makes up the World Wide Web.
11:36
2. How DNS Works
The Domain Name System (DNS) is a core component to the functionality of the web and web servers.
6:04
3. HTTP and HTML 101
HTTP is the protocol used between web browser and web servers to transfer data back and forth. HTML is the markup language that instructs browsers on how that data should be displayed on the page.
HTTP and HTML — Internet 101 (7:06)
4. Learn About the Web Interactively
While TryHackMe is a cybersecurity training platform, this free module is an informational module that will help you learn about the web technologies in a gamified manner.
Programming
1. Foundational Knowledge
Here you will have the opportunity to learn about the fundamental concepts in programming in a gamified manner. This entire module is interactive, so take it in small chunks at a time and have fun with it.
2. Learn PowerShell Interactively
This is a mini-series on my blog that will introduce you to programming fundamentals with PowerShell. PowerShell makes a great introductory language if you have a Windows computer, cause you can get started without having to install any additional software packages.
0xBEN
3. Learn Python Interactively
This is a very high-quality, free course on Udacity which will take you through the fundamentals of programming with Python. If you pick up here after my PowerShell course, you'll see a lot of the same concepts, just different ways of doing them with Python.
4. A Deeper Look into Programming
While this course is not interactive in nature, it is free and VERY informative. You'll gain a better understanding of computer numbering systems and the ways programs can control hardware, networking, and more.
Informational Resources
Systems Administration
Core Systems Concepts
- Storage
- CPU
- Memory
- Boot procedure
- System internals
- Core directories
- Filesystem hierarchy
- Windows Registry
- Event and audit logs
Shells and Terminals
This is a fantastic history lesson on the way humans have interacted with computer systems. It's a long read, but it is very educational and covers the primitive terminals with punch cards all the way to the current terminal emulators as we know them today.
Matthieu Cneude
Terminal Emulators
The terms console and terminal are used interchangeably to reference the software run by the user to emulate bygone physical terminals. Whether you choose to call it a terminal or a console, this piece of software presents to you the command-line interface via which your commands are passed to the shell.
cdleonUnix-like Shells
shbashcshfishkshshtcshzshpwsh— PowerShell
Windows Shells
powershellcmd— Legacy command prompt
Common Command Line Operations
Create, delete, modify files and directories
ls , mkdir , cd , touch , nano , cp , mv , rm , vim , Get-ChildItem , New-Item , Copy-Item , Move-Item , Rename-Item , Remove-Item
Manipulating file contents and text streams
grep , cat , sed , awk , tr , cut , paste
PowerShell: -split , -replace , -join
Managing processes and services
ps , kill , systemctl , service , strace , Get-Process , Stop-Process , Get-Service , Stop-Service , Restart-Service
Installing and uninstalling packages
apt , yum , pkg , pacman , zypper , winget , Install-Package , Uninstall-Package
Downloading files and interacting with the web
wget , curl , Invoke-WebRequest , Invoke-RestMethod , [System.Net.WebClient]::DownloadFile()
Systems Administration Resources
Cheat Sheets
- Linux command quick reference and examples — tl;dr
- Linux command parameter reference — ExplainShell
- Linux SysAdmin Quick Reference — Cheatography
- Interactive crontab schedule expression editor — Crontab.guru
- PowerShell cmdlet lookup — PDQ
- PowerShell cmdlet reference — SS64
- Ultimate sysadmin toolbox (PDF) — SpamTitan
Free Linux Training
Free Windows Training
- Windows server deployment and administration — Microsoft Learn
- Learn PowerShell through challenges — UnderTheWire
Collections of Resources
Computer Networking
Core Networking Concepts
- IP addressing
- Subnetting
- Routing (ping, layer 3)
- Switching (ARP, layer 2)
- Firewalls
- TCP/UDP protocols & ports
- VLANs
- Tunnels
- Proxies
- DNS
- OSI model
- TCP/IP model
- Computer Networking Flowchart
Networking Tools
IP Configuration
ip address,ip neighbor,ip linkGet-NetAdapterGet-NetIPConfigoripconfigGet-NetIPAddressGet-NetNeighbor- IP Subnet Calculator
Host Discovery
pingarp-scannmap
Packet Capture and Analysis
- Wireshark and
tshark tcpdump
Sockets
netcatorncsocatnetstatorss
DNS Troubleshooting
nslookupordig/etc/resolv.confResolve-DnsNameGet-DnsClientServerAddressGet-DnsClientCache- DNS Dumpster
- MXToolbox
Remote Connectivity
- OpenVPN
- Wireguard
- IPsec
sshscp- plink.exe
Firewalls
netshiptablespf
Proxies
proxychains- Burp (or ZAP)
Computer Networking Resources
Routing and Switching
TCP/IP
- Well-known port numbers and services list — MeridianOutpost
Encapsulation
Network Address Translation (NAT)
Domain Name System (DNS)
- Learn how DNS works — YouTube
Subnetting
- Quick subnetting — TechExams Community
Cryptography
- TLS Handshake Explained — CloudFlare
- SSH protocol overview — YouTube
Proxies
- Comparing forward and reverse proxies — CloudFlare
Onion Routing
- How Tor works — YouTube
Free Networking Courses
Free Hands-On Labs
- GNS3 Computer Networking Lab — University of the Pacific
- Wireshark Tutorial for Beginners — YouTube
Collections of Resources
Web
Core Web Concepts
- HTTP methods and headers
- Web servers
- Proxies
- Directories and files
- HTML
- CSS
- JavaScript
- Databases
- Inputs and parameters
Web Tools
CLI HTTP Clients
curlwgetInvoke-WebRequestInvoke-RestMethod
DOM Inspection
- Browser developer tools (F12 key)
Content Discovery
gobusterferoxbuster
Brute Force
hydraffuf
Web Stack Analyzers
Web Resources
HTTP Fundamentals
- HTTP request methods reference — Mozilla Developers
- HTTP headers reference — Wikipedia
Web Development
- Learn HTML interactively — Codecademy
- Learn CSS interactively — Codecademy
- Learn JavaScript interactively — Codecademy
- Learn SQL interactively — Codecademy
- Learn Node.js interactively — Codecademy
Web Server Administration
Web Security
- Web Security Academy — PortSwigger
- The web in depth — Hacker101
- Exploit Database (not exclusively web) — OffSec
Search Engine Cheat Sheets
- Google search operators reference — Kinsta
Computer Programming
Core Programming Concepts
- Object-oriented programming (OOP)
- Data types
- Variables
- Flow logic (if/else)
- Loops
- Functions
- Source code review
- Modifying exploits
REPL
- Read
- An interpreter reads your input
- Evaluate
- An interpreter executes (evaluates) your instructions
- Print
- An interpreter prints any output or errors
- Loop
- An interpreter loops back to repeat the process
Programming Languages with a REPL:
- Python
- PowerShell
- JavaScript (Node.js)
Computer Programming Resources
Compiled & Scripting Languages
Overview of Compiled and Interpreted Languages
Example Interpreted (Scripting) Languages
- Bash
- JavaScript
- PowerShell
- Python
- Ruby
Example Compiled Languages
- C
- C++
- C#
- Java
Multi-language Training
- Extensive list of programming language tutorials — Exercism.org
Free Bash Training
- Learn the basics of shell scripting — shellscript.sh
- Interactive shell scripting tutorial — learnshell.org
Free PowerShell Training
- PowerShell as Your First Programming Language
- Learn PowerShell through Challenges — UnderTheWire
- Automate tasks using PowerShell — Microsoft Learn
Free Python Training
- Intro to Python — Udacity
- Free interactive Python tutorial — learnpython.org
- Full intro to Python course — YouTube
L337 Coding Challenges
- Competitive coding challenges in multiple languages — Codewars
- Online coding tests — HackerRank
Cybersecurity
Offensive Security
Training Platforms
- 247CTF — Test your hacking skills on a variety of challenges
- Hacker101 CTF — CTF challenges by Hacker1
- HackTheBox — Practice your ethical hacking skills
- HackTheBox Academy — Learn and practice cybersecurity in depth
- HackSplaining — Overview of mitigating and exploiting common vulnerabilities
- OverTheWire — Linux security challenges
- picoCTF — Computer security challenges by Carnegie Mellon University
- PortSwigger Web Security Academy — Learn web security interactively
- Proving Grounds — OffSec official ethical hacking practice
- pwnable.kr — Interactive security challenges
- TryHackMe — Learn and practice cybersecurity
- Unescape() Room — XSS Challenges by Jober Tabma
Cheat Sheets
- Active Directory Exploitation Cheat Sheet
- GTFOBins — Check if a Linux binary can be abused
- HackTricks — Extensive list of quick hacking tips and tricks
- ired.team — A large knowledge base of red teaming tips and tricks
- Hacking Tools Cheat Sheet (PDF) — Compass Security
- LOLBAS — Check if a Windows binary can be abused
- netsec.ws Metasploit payloads list
- netsec.ws List of TTY generators
- pentestmonkey — Reverse Shell Cheat Sheet
- The Hacker Recipes — Yet another extensive list of hacking tips
- WADComs — Check if a Windows / AD binary can be abused
Collections of Resources
Defensive Security
Training Platforms
- Blue Team Labs Online
- Crackmes — Binary analysis practice
- CyberDefenders
- HackSplaining — Overview of mitigating and exploiting common vulnerabilities
- LetsDefend
Defense Frameworks
- MITRE ATT&CK — Adversary TTPs at various stages
- MITRE Engage — Learn how to engage the adversary
- Lockheed Martin Cyber Kill Chain
- NIST Cybersecurity Framework
Cheat Sheets
Collections of Resources
- GitHub repo with an extensive list of blue team tools and resources
- GitHub repo with an extensive list of system hardening resources
- GitHub repo with an extensive list of threat hunting resources
- GitHub repo with an extensive list of cyber Threat Intel resources
- Large list of various cybersecurity cheat sheets — Reddit
- Massive collections of various infosec references — rmusser.net
- SANS Blue Team Operations (Lots of good stuff buried in menus)
- Ultimate sysadmin toolbox (PDF) — SpamTitan
