Absolutely! Here's a beginner-friendly Ethical Hacking Roadmap for your friend Arshin.
This
roadmap assumes no prior knowledge and builds a solid path step by step—from basics to
advanced concepts—focusing on hands-on learning, tools, and certifications.
🛡 Ethical Hacking Roadmap for Beginners (2025 Edition)
Stage 1: Build Strong Foundations (1–2 Months)
📚 Goal: Understand basic computer systems, networking, and operating systems.
✅ Topics to Learn:
Basic Computer & Internet Concepts
Operating Systems (Especially Linux)
Learn basic Linux commands (Ubuntu, Kali Linux)
Networking Basics
IP, TCP/IP, Ports, DNS, NAT, OSI Model, etc.
Tools: Wireshark
🔧 Tools to Practice:
Install Kali Linux in VirtualBox or VMware
Set up Windows VM for practice
Use TryHackMe Beginner Path: https://tryhackme.com
🎓 Resources:
Cybrary: Introduction to IT & Cybersecurity
Professor Messer’s Networking Videos (Free)
TryHackMe: Pre Security & Complete Beginner Paths
Stage 2: Learn Programming (2–4 Months, Parallel)
📚 Goal: Be able to write simple scripts and understand exploits
✅ Languages to Learn:
Python – scripting, automation, exploit writing
Bash – for Linux shell scripting
HTML/CSS + JS (Basics) – for web hacking
🎓 Resources:
Python for Hackers (FreeCodeCamp)
Hack The Box Scripting Challenges
Stage 3: Understand Cybersecurity Concepts (1–2
Months)
📚 Goal: Learn about threats, vulnerabilities, and defenses
✅ Topics:
CIA Triad (Confidentiality, Integrity, Availability)
Types of Hackers
Malware, Phishing, Social Engineering
Passwords & Hashing
🎓 Resources:
TryHackMe: Introduction to Cyber Security Path
Book: “The Hacker Playbook” (vol 1 or 2)
YouTube: NetworkChuck, TheCyberMentor
Stage 4: Dive into Ethical Hacking (3–6 Months)
🧠 Goal: Learn actual hacking techniques legally
✅ Skills to Focus On:
Information Gathering & Scanning (Nmap, Recon-ng)
Vulnerability Analysis (Nessus, OpenVAS)
Exploitation (Metasploit, manual techniques)
Web Application Hacking (OWASP Top 10)
WiFi Hacking (Aircrack-ng, Wireshark)
Post Exploitation & Privilege Escalation
🔧 Platforms for Practice:
TryHackMe
Hack The Box
OverTheWire: Bandit
PortSwigger Web Security Academy
Stage 5: Get Certified (Optional but Recommended)
🎓 Goal: Validate your skills with a recognized cert
✅ Recommended Certifications:
CompTIA Security+ – Basic cybersecurity
CEH (Certified Ethical Hacker) – Entry-level ethical hacking
eJPT by INE – Practical & beginner-friendly
OSCP – Advanced, industry-respected (for later)
Stage 6: Build Projects + Join Community
🚀 Goal: Showcase skills and grow network
✅ What to Do:
Create a GitHub portfolio: upload scripts, notes, tools
Write blogs (e.g., Medium) about hacking labs or challenges
Join Discord servers, LinkedIn communities, or Reddit subs like r/netsec and r/hacking
🎒 Tools and Websites to Bookmark
Category Tools/Websites
Labs TryHackMe, HackTheBox
Scanning Nmap, Nikto
Exploitation Metasploit
OSINT theHarvester, Shodan
Passwords JohnTheRipper, Hashcat
Web Hacking Burp Suite, OWASP ZAP
Forums Reddit, GitHub, InfoSec Writeups
🔁 Optional Weekly Plan (First 8 Weeks)
Week Focus
1 Linux basics, terminal navigation
2 Networking: TCP/IP, DNS, Wireshark
3 Nmap, scanning, intro to TryHackMe
4 Bash & Python scripting
5 Vulnerability scanning, simple exploitation
6 Web hacking: OWASP Top 10
7 WiFi hacking basics, intro to Metasploit
8 Privilege escalation, OSINT practice
If Arshin wants, I can create a Notion page or PDF tracker with tasks, tools, and progress
bars.
Would she prefer videos or text-based learning? And would she like a group or self-paced
guide?
