You cannot be an expert hacker in everything. #cybersecurity is a vast field.
Let's say you wear an offensive hat. This is a vast field in itself.
Choose one topic, say "application security" (I'm also into this).
Here’s my best approach to skill-up fast:
0/n
1. Read write-ups from @PentesterLand on that specific topic (say "authentication bypass")
Go to: pentester.land/writeups/ and search for "bypass"
2. Practice on @RealTryHackMe
Go to: tryhackme.com/hacktivities?tab=search and search for "bypass"
3. Practice on Web Security Academy by @PortSwigger
Go to portswigger.net/web-security/logic-flaws
4. Practice what you’ve learned on VDPs and get featured in their leaderboards
I don’t recommend #bugbounty and I've shared why in this video: youtube.com/watch?v=YU4QBjg703U
5. Rinse, recycle, repeat...
6. When you feel confident enough, get clients using the tips I share with you in this video:
youtube.com/watch?v=2-fTRjZehD8
Like, retweet and follow me @cristivlad25 for more.
#pentesting #infosec #cybersecurity #appsec #bugbounty