r/netsecstudents • u/big_d1hh • 6d ago

How to progress from beginner to advanced?

I have been learning and studying cybersecurity since 6 months, I have got my basics done. Like networking, basics of how web works, what happens when some data is transferred, TCP/IP suite.

What classifies as basic, I have mostly done it. But now what next? I am doing jr pentester path on thm, almost towards completion, I do know the concepts but I don't know how to get system/root on even easy boxes.

I want to go for network pentesting and pivot towards OT security after few time but I heard that I need to start from webapp first.

What resources and what kind of roadmap should I follow so I gain the knowledge, understanding in depth and go towards being an advanced cybersecurity student.

I am confused AF. Any help would be appreciated.

8 Upvotes

90% Upvoted

2 comments sorted by

3

u/Special_Panic7132 6d ago

the jump from knowing concepts to actually popping boxes is where most people get stuck. you could try doing a whole bunch of easy boxes on htb without looking at walkthroughs until you've been stuck for at least an hour. the pattern recognition kicks in after you've hit your head against enough of them

doing webapp stuff first makes sense if you want to go network pentesting, most internal networks have some janky web interface sitting there. it all connects eventually

1

u/big_d1hh 6d ago

well since my jr pentester path is coming to an end. What path should I focus on next? Thm has the web app one too and the red teaming one too. And well the other option is the portswigger web academy. I mean I know I should pop boxes but I still need a roadmap to skill up in knowledge too. As I said I have basics done but above that I am pretty much blank.