Thread by @CristiVlad25

You cannot be an expert hacker in everything. #cybersecurity is a vast field.

Let's say you wear an offensive hat. This is a vast field in itself.

Choose one topic, say "application security" (I'm also into this).

Here’s my best approach to skill-up fast:

0/n

1. Read write-ups from @PentesterLand on that specific topic (say "authentication bypass")

Go to: pentester.land/writeups/ and search for "bypass"

2. Practice on @RealTryHackMe

Go to: tryhackme.com/hacktivities?t… and search for "bypass"

3. Practice on Web Security Academy by @PortSwigger

Go to portswigger.net/web-security/l…

4. Practice what you’ve learned on VDPs and get featured in their leaderboards

I don’t recommend #bugbounty and I've shared why in this video:

5. Rinse, recycle, repeat...

6. When you feel confident enough, get clients using the tips I share with you in this video:



Like, retweet and follow me @CristiVlad25 for more.

#pentesting #infosec #cybersecurity #appsec #bugbounty