angelhack
Campus Hub NIT Sri.
whoami
- Student @ NIT Srinagar - CTF Player
- CyberSec Enthusiast - Hacking Hardwares
- Stock Market - OSINT for Fun
- Blogger - HiddenEye Developer
- Movies, Songs - Evilginx2 Contributor
- TryHackMe Top 1%
- HackTheBox : Hacker Udayveer Singh
@an0nud4y
CERTIFICATIONS CONTACT
THM - Offensive Pentesting Practical Buffer Overflow For OSCP Twitter : @an0nud4y
THM - Web Fundamentals GPCSSI 2021 Insta : @its_udy
THM - CompTIA Pentest+ Mail : anonud4y@[Link]
eJPT (Upcoming)
Pentester Lab - Intro Badge
CEH Practical (Upcoming) To Know Multiple Platform Profiles
Pentester Lab - PCAP Badge
Pentester Lab - Recon Badge [Link]
Pentester Lab - Unix Badge
Table Of Contents
Intro to Cybersecurity
Types of Job Roles in Cybersec
Roadmap & Resources
Getting involved with infosec Community
Hackers to Follow on Social Media
Hacking Podcasts to listen
Certifications You Should Have
Building Your Resume
Making Money in Cybersec
My Goals (Understanding Plan/Goal Setting)
Intro to Cybersecurity
What is CyberSecurity ??
Cybersecurity is the art of protecting/recovering networks, devices, and data from unauthorized access or
criminal use and the practice of ensuring confidentiality, integrity, and availability of information. (Acording
to CISA)
Why we need Cybersecurity ??
- To Reduce the Risk of Data Breaches and attacks from Black Hat Hackers (APT and
Individual Hacking Groups).
- To Prevent Unauthorized access to sensitive information
- To Prevent Services Disruption (Like denial-of-service attacks)
- There are lot more reasons like (Ensuring Business continuity, Protecting from network
exploitations from outsiders)
Reference Blogs
[Link]
[Link]
Types of Job Roles
- Ethical Hacker/Penetration Tester
- Chief Information Security officer (CISO)
- Malware Analyst
- Exploit Developer
- Incident responder / Forensic Analyst
- Cryptographer
- Security Architect
- Security Engineer
- Security Analyst
- Security Consultant
- Security Researchers
References
[Link]
[Link]
[Link]
Let's Understand these Job Roles ...
Ethical Hacker / Penetration Tester
- Hacking for good with written permission.
- Simulation Attacks on Network.
- Tries Not to Harm the infrastucture during Live attacks.
- Takes care of informative to High impact bugs.
- Provides a full test report and finding (Report writting).
- Need Good Communication skills.
- Part of Red team
Chief information Security Officer (CISO)
- Head of Security Team
- Directs the Strategy, operations & Budget for security.
- Responsible for major Security Decisions
Malware Analyst
- Identifies malware in a Computer or Network.
- Reverse Engineer malware to understand its functionality.
- Identifies ways to detect and prevent the malware from spreading.
Let's Understand these Job Roles ...
Exploit Developer
- Uses research and findings to creates exploit
codes to exploit the vulnerabilities.
Incident Responder / Forensic Analyst
- Helps to analyze/recover erased/encrypted data.
- Analyzes and Monitors all network activities and logs.
- Helps to identify intrusions or suspicious activities inside network.
- Part of Blue Team.
- Works with Red team to fix the Bugs and Vulnerabilities
Cryptographer
- Develops algorithms and security systems to encrypt Confidential
information.
- Encryption helps to share Confidential data from one to another
end without fear of compromising.
Let's Understand these Job Roles ...
Security Architect
- Develops and organizes secured computer systems and networks
to protect confidential information from hackers.
Security Engineer
- Liable for testing and screening various security software
employed, for improving organizational security.
Security Analyst
- Performs several security related operations such as password
complexity, data loss mitigation, and other security practices.
Security Consultant
- Position Mostly found in small organisations.
- Helps to strengthen security , by providing consultation and
technical help.
Let's Understand these Job Roles ...
Security Researchers
- They helps to predict the future vulnerabilities by tracking current
vulnerabilities.
- Research on products to find unknown or zero day vulnerabilities,
which may be actively being exploited.
To Know about Life of a Security Researcher , Check
out this blog
[Link]
security-researcher
Mindmap By: Harsh Bothra
Reference: [Link]
perspective-learning-path-b53065189ba5
Learn365 : [Link]
Roadmap & Resources
List of Resources
1. TryHackMe Pathways + Labs
2. HackTheBox Machines
3. HackTheBox Academy Modules
4. TCM-Sec Courses
5. Tiberius Privesc Courses
6. Naga Sai Nikhil Courses
7. Portswigger Academy
8. PentesterLab Badges
9. Bug Bounty Courses By XSSRAT and Offensive Hunter
10. Pentester Academy
11. Hacker101 Resources
12. OWASP TOP10
13. Google
Roadmap & Resources
Extra Resources
BugCrowd University
Nahamsec BB(BugBounty) Roadmap
Medium Blog Writeups
HackerOne BB Disclosed Reports
Zseano's BB Methodology
Pentester Land
BugBountyHunter
Intigriti Hackademy
Reference
[Link]
Download Roadmap
Click Here
Getting involved with infosec Community
Where to Find Good(Ethical) hackers ??
Twitter - Most hackers/Researchers are on twitter.
Youtube - They also helps Community to learn through Youtube
Discord - They Have Discord Servers to talk/share stuffs with each other.
Medium - They helps Community by writing there work/findings.
Reddit - Infosec thread.
Linkedin - They Have professional profiles too.
Forums - You can Find Black Hat Hackers too.
Github - They helps community by building tools and sharing there tools.
Telegram - Some awesome Groups are there.
So What to do ?? Where to start from ??
Join Twitter Today, and Follow the Hackers mentioned in next slide.
List of Hackers to Follow
Twitter
[Link]
Hunters/blob/master/assets/[Link]#twitter
Youtube
[Link]
Hunters/blob/master/assets/[Link]#youtube-channels
Streamers
[Link]
Hunters/blob/master/assets/[Link]#streamers
Discord Servers
[Link]
Hunters/blob/master/assets/[Link]#discord-servers
Podcasts/Books for Cybersecurity
Podcasts
[Link]
Hunters/blob/master/assets/[Link]#podcasts
Books
[Link]
Hunters/blob/master/assets/[Link]#books
News/Updates of Cybersecurity
Telegram
[Link]
join/
Websites
[Link]
Certifications
Few Certifications Recommended For Beginners
eJPT
CEH (Practical)
PNPT
eWPT (Get Portswigger Cert if Possible)
eWPTX
eCPPT
eCPPTx
OSCP
OSWE
CRTP/CRTE
OSED
Resume Building
Understand From Experts in Infosec
John Hammond
[Link]
Jhaddix/Nahamsec
[Link]
Making Money in Cybersec
Bug Bounty Hunting
Hackerone
Bugcrowd
Open Bug Bounty
YesWeHack
intigriti
Synack Red Team (SRT)
Reference :
[Link]
Other Ways
Penetration Testing (On demand)
Security Consultancy to small orgs
Cybersec Content Creation
Courses Selling
Creating and selling tools and methodologies
My Goals
Twitter thread
[Link]
