Redditors recommend several online hacking labs for beginners, including TryHackMe, Hack The Box, and PortSwigger Web Security Academy, among others.
Comprehensive Learning Paths: TryHackMe offers structured learning paths that cover various aspects of cybersecurity, from basic networking to penetration testing. "I would recommend starting at TryHackMe! It is the site where I began cybersecurity as a complete beginner!"
Hands-on Labs: The platform provides numerous hands-on labs and challenge rooms to help you practice your skills in a safe environment. "TryHackMe is a must, codex.io to learn Python and others, Hackthebox (afterwards), [email protected] to gym your Terminal/Linux skills"
Free and Premium Options: While there are plenty of free rooms available, the premium subscription offers a more efficient learning process and access to additional content. "TryHackMe has lots of free rooms. They try to make you pay by making the rooms in the roadmap paid, but there are LOTS of free rooms."
Academy and Labs: Hack The Box provides both an Academy for structured learning and Labs for more advanced practice. "I would recommend either jumping straight into trying to solve machines or go the academy route."
Real-world Scenarios: HTB Labs offers realistic hacking challenges that simulate real-world penetration testing scenarios. "HTB Labs is great but can be overwhelming if you're just coming from THM."
Community and Certifications: The platform has a strong community and offers certifications like CPTS (Certified Penetration Testing Specialist). "Hackthebox is good and maybe get some comptia Certs?"
Web Hacking Focus: PortSwigger Academy specializes in web application security, offering a wealth of free labs and structured lessons. "Follow the Portswigger Academy. Its completely free and great beginners intro to web hacking with great explanations."
Practical Exercises: The labs allow you to practice various web vulnerabilities like SQL injection, XSS, and IDOR. "I was able to 'start learning' the 'Web Fundamentals' course directly using my free plan. It seems to already cover topics like SQL injection, IDOR, etc."
ElevateLab Academy: Offers free labs with full Kali VM access. "If you want try out free labs with full Kali VM, try https://elevatelab.academy"
Pwn.College: Provides free courses and labs for ethical hacking. "Try pwn.college, has course and labs for free"
OverTheWire Wargames: Great for improving your Linux command-line skills. "try tryhackme and overthewire wargames"
Start with Basics: Ensure you have a solid understanding of networking, operating systems, and programming before diving into advanced hacking techniques. "The essential thing first is to have a minimum knowledge of Linux."
Practice Regularly: Consistent practice is key to developing your skills. "Just go and hands on tools, you will learn faster then any youtube tutorials or blog guide."
Join Communities: Engaging with the hacking community can provide valuable insights and support. "Join Discord servers related to hacking like OwlSec discord server with alot of experts"
These communities are great places to ask questions, share your progress, and get advice from experienced professionals.