hamed233/cybersecurity-mastery-roadmapA comprehensive, step-by-step guide to mastering cybersecurity from beginner to expert level with curated resources, tools, and career guidance
# 🛡️ Ultimate Cybersecurity Mastery Roadmap
<p align="center">
<img src="https://raw.githubusercontent.com/Hamed233/Cybersecurity-Mastery-Roadmap/main/images/cybersecurity_roadmap.png" alt="Cybersecurity Roadmap Banner" width="800">
</p>
> **A comprehensive, step-by-step guide to mastering cybersecurity from beginner to expert level with curated resources, tools, and career guidance**
## 📋 Table of Contents
- [Introduction](#introduction)
- [How to Use This Roadmap](#how-to-use-this-roadmap)
- [Roadmap Overview](#roadmap-overview)
- [Foundation Phase](#foundation-phase)
- [Technical Skills Phase](#technical-skills-phase)
- [Specialization Phase](#specialization-phase)
- [Advanced Phase](#advanced-phase)
- [Professional Development](#professional-development)
- [Learning Resources](#learning-resources)
- [Cybersecurity Tools](#cybersecurity-tools)
- [Certifications Guide](#certifications-guide)
- [Career Paths](#career-paths)
- [Cybersecurity Communities](#cybersecurity-communities)
- [Capture The Flag (CTF) Competitions](#capture-the-flag-ctf-competitions)
- [Cybersecurity Labs and Practice Environments](#cybersecurity-labs-and-practice-environments)
- [Security Research Resources](#security-research-resources)
- [Contributing](#contributing)
## Introduction
Welcome to the Ultimate Cybersecurity Mastery Roadmap! This comprehensive guide is designed to help you navigate the complex world of cybersecurity, providing a clear path from beginner to expert level. Whether you're just starting your journey or looking to advance your existing skills, this roadmap will guide you through the essential knowledge, skills, and certifications needed to succeed in the cybersecurity field.
Cybersecurity is a vast and rapidly evolving field that requires continuous learning and adaptation. This roadmap is designed to provide structure to your learning journey, helping you build a solid foundation before moving on to more specialized areas.
## How to Use This Roadmap
This roadmap is divided into phases, each building upon the previous one. For each topic, you'll find:
- **Description**: Brief explanation of the topic
- **Learning Resources**: Recommended courses, books, tutorials, and videos
- **Practical Exercises**: Hands-on activities to reinforce your learning
- **Milestones**: Key indicators that you've mastered the topic
- **Tools**: Relevant tools to practice with
Progress through each phase sequentially, but feel free to dive deeper into topics that interest you or are relevant to your career goals. Remember that practical experience is crucial in cybersecurity, so make sure to supplement your theoretical knowledge with hands-on practice.
## Roadmap Overview
### Learning Path Progression
1. **Foundation Phase** - Build core knowledge in computing, networking, and basic security principles
2. **Technical Skills Phase** - Develop practical security skills across various domains
3. **Specialization Phase** - Focus on offensive or defensive security specializations
4. **Advanced Phase** - Master advanced topics and specialized security domains
5. **Professional Development** - Continuous learning and career advancement
## Foundation Phase
### 1. Computer Fundamentals
- **Operating Systems**
- [CS50: Introduction to Computer Science](https://www.edx.org/course/introduction-computer-science-harvardx-cs50x)
- [Operating Systems: Three Easy Pieces](http://pages.cs.wisc.edu/~remzi/OSTEP/)
- [MIT 6.S081: Operating System Engineering](https://pdos.csail.mit.edu/6.S081/2020/)
- [Introduction to Operating Systems – Georgia Tech (Udacity)](https://www.udacity.com/course/introduction-to-operating-systems--ud923)
- **Books**:
- "Modern Operating Systems" by Andrew S. Tanenbaum
- "Computer Systems: A Programmer's Perspective" by Randal E. Bryant
- "Operating System Concepts" – Abraham Silberschatz, et al.
- **Practical Exercises**:
- Install and explore Windows, Ubuntu, Arch, macOS
- Learn memory management, scheduling, file systems
- Play [OverTheWire: Bandit](https://overthewire.org/wargames/bandit/)
- Use [QEMU](https://www.qemu.org/) or [VirtualBox](https://www.virtualbox.org/)
- **Networking Basics**
- [Computer Networking: A Top-Down Approach](https://gaia.cs.umass.edu/kurose_ross/index.php)
- [Stanford CS144: Computer Networking](https://cs144.github.io/)
- [Practical Networking](https://www.practicalnetworking.net/)
- [Wireshark Tutorial (YouTube)](https://www.youtube.com/playlist?list=PLW8bTPfXNGdC5Co0VnBK1yVzAwSSphzpJ)
- [Cisco Networking – Packet Tracer](https://www.netacad.com/courses/packet-tracer)
- **Books**:
- "TCP/IP Illustrated, Volume 1" by W. Richard Stevens
- "Network Warrior" by Gary A. Donahue
- Computer Networking: Principles, Protocols and Practice – Olivier Bonaventure
- **Tools**:
- [Wireshark](https://www.wireshark.org/) - Network protocol analyzer
- [tcpdump](https://www.tcpdump.org/) - Command-line packet analyzer
- [Cisco Packet Tracer](https://www.netacad.com/courses/packet-tracer) - Network simulation tool
- [GNS3](https://www.gns3.com/)
- **Practical Exercises**:
- Simulate networks with GNS3 or Packet Tracer
- Analyze packets with Wireshark
- Practice subnetting, DNS, firewall rules
- **Programming Fundamentals**
- [Python for Everybody](https://www.py4e.com/)
- [Automate the Boring Stuff with Python](https://automatetheboringstuff.com/)
- [Codecademy Python Course](https://www.codecademy.com/learn/learn-python-3)
- [freeCodeCamp JavaScript Algorithms and Data Structures](https://www.freecodecamp.org/learn/javascript-algorithms-and-data-structures/)
- [Harvard CS50's Web Programming with Python and JavaScript](https://cs50.harvard.edu/web/)
- **Books**:
- "Python Crash Course" by Eric Matthes
- "Eloquent JavaScript" by Marijn Haverbeke
- "Head First Python" by Paul Barry
- **Tools**:
- [Visual Studio Code](https://code.visualstudio.com/) - Code editor
- [PyCharm](https://www.jetbrains.com/pycharm/) - Python IDE
- [Jupyter Notebooks](https://jupyter.org/) - Interactive computing
- [Replit](https://replit.com/)
- **Practical Exercises**:
- Build simple security tools (port scanner, password generator)
- Automate repetitive security tasks
- Solve coding challenges on [HackerRank](https://www.hackerrank.com/) or [LeetCode](https://leetcode.com/)
- **Linux Fundamentals**
- [Linux Journey](https://linuxjourney.com/)
- [Linux Command Line Basics](https://ubuntu.com/tutorials/command-line-for-beginners#1-overview)
- [OverTheWire: Bandit](https://overthewire.org/wargames/bandit/)
- [Linux Survival](https://linuxsurvival.com/)
- [Linux From Scratch](https://www.linuxfromscratch.org/)
- **Books**:
- "The Linux Command Line" by William Shotts
- "How Linux Works" by Brian Ward
- "Linux Bible" by Christopher Negus
- **Tools**:
- [VirtualBox](https://www.virtualbox.org/) - Virtualization software
- [Vagrant](https://www.vagrantup.com/) - Development environment management
- [Kali Linux](https://www.kali.org/) - Security-focused Linux distribution
- **Practical Exercises**:
- Install and configure a Linux distribution
- Master bash scripting for automation
- Set up a LAMP/LEMP stack
- Configure user permissions and security settings
### 2. Information Security Principles
- **CIA Triad & Security Fundamentals**
- [Cybrary Introduction to IT & Cybersecurity](https://www.cybrary.it/course/introduction-to-it-and-cybersecurity/)
- [NIST Cybersecurity Framework](https://www.nist.gov/cyberframework)
- [edX Introduction to Cybersecurity](https://www.edx.org/course/introduction-to-cybersecurity)
- [Coursera Information Security](https://www.coursera.org/specializations/information-security)
- **Books**:
- "Computer Security: Principles and Practice" by William Stallings
- "Security Engineering" by Ross Anderson
- "The Art of Deception" by Kevin Mitnick
- **Practical Exercises**:
- Analyze case studies of security breaches
- Create a security policy for a fictional organization
- Conduct a basic risk assessment
- **Cryptography Basics**
- [Cryptography I by Stanford University](https://www.coursera.org/learn/crypto)
- [Practical Cryptography for Developers](https://cryptobook.nakov.com/)
- [Khan Academy Cryptography](https://www.khanacademy.org/computing/computer-science/cryptography)
- [Crypto101](https://www.crypto101.io/)
- **Books**:
- "Serious Cryptography" by Jean-Philippe Aumasson
- "Applied Cryptography" by Bruce Schneier
- "Cryptography Engineering" by Niels Ferguson, Bruce Schneier, and Tadayoshi Kohno
- **Tools**:
- [CyberChef](https://gchq.github.io/CyberChef/) - Encryption/decryption tool
- [OpenSSL](https://www.openssl.org/) - Cryptography toolkit
- [Hashcat](https://hashcat.net/hashcat/) - Password recovery tool
- **Practical Exercises**:
- Implement basic encryption/decryption algorithms
- Analyze cryptographic protocols
- Solve cryptography challenges on [Cryptopals](https://cryptopals.com/)
- **Security Policies & Compliance**
- [SANS Security Policy Templates](https://www.sans.org/security-resources/policies/)
- [ISO 27001 Overview](https://www.iso.org/isoiec-27001-information-security.html)
- [NIST Special Publications](https://csrc.nist.gov/publications/sp)
- [GDPR Compliance](https://gdpr.eu/)
- **Books**:
- "Information Security Policies, Procedures, and Standards" by Thomas R. Peltier
- "The Compliance Guide to the NIST Cybersecurity Framework" by Lars Benson
- "CISSP Study Guide" by Eric Conrad
- **Practical Exercises**:
- Create a security policy for a fictional organization
- Conduct a gap analysis against a security framework
- Develop an incident response plan
### 3. Basic Security Tools
- **Security Tool Fundamentals**
- [SANS SEC504: Hacker Tools, Techniques, Exploits, and Incident Handling](https://www.sans.org/cyber-security-courses/hacker-techniques-exploits-incident-handling/)
- [Black Hills Information Security Webcast](https://www.blackhillsinfosec.com/blog/webcasts/)
- [Cybrary Open Source Intelligence](https://www.cybrary.it/practice-lab/perform-open-source-intelligence)
- **Books**:
- "Hacking: The Art of Exploitation" by Jon Erickson
- "The Hacker Playbook 3" by Peter Kim
- **Tools**:
- [Kali Linux](https://www.kali.org/) - Security-focused Linux distribution
- [Darkmoon](https://github.com/ASCIT31/Dark-Moon) - Open source (GPL-3.0) autonomous AI penetration testing platform covering web, API, Active Directory and Kubernetes, with proof of exploitation and a local privacy gateway.
- [Metasploit](https://www.metasploit.com/) - Penetration testing framework
- [Nmap](https://nmap.org/) - Network discovery and security auditing
- **Practical Exercises**:
- Set up a security lab environment
- Perform basic reconnaissance on a target (with permission)
- Use OSINT tools to gather information
- **Vulnerability Scanning**
- [OpenVAS Tutorial](https://www.openvas.org/)
- [Nessus Essentials Tutorial](https://www.tenable.com/products/nessus/nessus-essentials)
- [OWASP ZAP Getting Started](https://www.zaproxy.org/getting-started/)
- **Books**:
- "Mastering Kali Linux for Advanced Penetration Testing" by Vijay Kumar Velu
- "The Basics of Hacking and Penetration Testing" by Patrick Engebretson
- **Tools**:
- [OpenVAS](https://www.openvas.org/) - Open-source vulnerability scanner
- [Nessus](https://www.tenable.com/products/nessus) - Vulnerability scanner
- [Nikto](https://cirt.net/Nikto2) - Web server scanner
- **Practical Exercises**:
- Set up a vulnerable machine (e.g., [Metasploitable](https://sourceforge.net/projects/metasploitable/))
- Perform vulnerability scans and analyze results
- Create vulnerability reports
## Technical Skills Phase
### 4. Network Security
- **Network Protocols & Security**
- [Professor Messer Network+ Course](https://www.professormesser.com/network-plus/n10-008/n10-008-training-course/)
- [SANS SEC560: Network Penetration Testing and Ethical Hacking](https://www.sans.org/cyber-security-courses/network-penetration-testing-ethical-hacking/)
- [Cybrary Network Security](https://www.cybrary.it/course/cyber-network-security)
- **Books**:
- "Network Security Essentials" by William Stallings
- "Practical Packet Analysis" by Chris Sanders
- "Black Hat Python" by Justin Seitz
- **Tools**:
- [Wireshark](https://www.wireshark.org/) - Network protocol analyzer
- [Nmap](https://nmap.org/) - Network discovery and security auditing
- [Bettercap](https://www.bettercap.org/) - Network attack and monitoring tool
- [Zeek](https://zeek.org/) - Network security monitor
- **Practical Exercises**:
- Perform network reconnaissance with Nmap
- Analyze network traffic for security issues
- Detect and prevent ARP spoofing attacks
- Configure network security monitoring
- **Firewalls & IDS/IPS**
- [pfSense Fundamentals](https://www.netgate.com/training/pfsense-fundamentals-and-advanced-application)
- [Snort IDS Fundamentals](https://iritt.medium.com/ids-fundamentals-cyber-security-101-security-solutions-tryhackme-walkthrough-23edba97cfa3)
- [Suricata IDS/IPS](https://suricata.io/)
- [Cisco Firewall Configuration](https://www.cisco.com/c/en/us/solutions/small-business/resource-center/security/how-to-setup-a-firewall.html)
- **Books**:
- "Practical Intrusion Analysis" by Ryan Trost
- "The Practice of Network Security Monitoring" by Richard Bejtlich
- "Firewalls and Internet Security" by William R. Cheswick
- **Tools**:
- [pfSense](https://www.pfsense.org/) - Open-source firewall
- [Snort](https://www.snort.org/) - Network intrusion detection system
- [Suricata](https://suricata.io/) - Network IDS/IPS
- [Security Onion](https://securityonionsolutions.com/) - Security monitoring platform
- **Practical Exercises**:
- Set up a firewall with pfSense
- Configure and tune IDS/IPS rules
- Analyze and respond to security alerts
- Create custom detection rules
- **VPN & Secure Communications**
- [OpenVPN Setup Guide](https://openvpn.net/community-resources/how-to/)
- [WireGuard VPN Tutorial](https://www.wireguard.com/quickstart/)
- [IPsec VPN Configuration](https://www.cisco.com/c/en/us/support/docs/routers/1700-series-modular-access-routers/71462-rtr-l2l-ipsec-split.html)
- [SSL/TLS Deep Dive](https://www.feistyduck.com/library/openssl-cookbook/)
- **Books**:
- "VPNs Illustrated: Tunnels, VPNs, and IPsec" by Jon C. Snader
- "Implementing SSL/TLS Using Cryptography and PKI" by Joshua Davies
- **Tools**:
- [OpenVPN](https://openvpn.net/) - Open-source VPN solution
- [WireGuard](https://www.wireguard.com/) - Modern VPN protocol
- [Strongswan](https://www.strongswan.org/) - IPsec implementation
- [OpenSSL](https://www.openssl.org/) - SSL/TLS toolkit
- **Practical Exercises**:
- Set up a site-to-site VPN
- Configure a remote access VPN
- Implement certificate-based authentication
- Analyze VPN traffic for security issues
### 5. System Security
- **Operating System Security**
- [Windows Security Fundamentals](https://learn.microsoft.com/en-us/credentials/certifications/security-compliance-and-identity-fundamentals/?practice-assessment-type=certification)
- [Linux Security Fundamentals](https://www.udemy.com/course/linux-security-fundamentals/?srsltid=AfmBOopLV9Q8LTu-wp-oVIfdZGQsfKXtfOMFtL3M9BsnM1lUoptqTaPT&couponCode=KEEPLEARNING)
- [macOS Security and Privacy Guide](https://github.com/drduh/macOS-Security-and-Privacy-Guide)
- [SANS SEC505: Securing Windows](https://www.cybersecuritycourses.com/course/sec505-securing-windows-and-powershell-automation/)
- **Books**:
- "Windows Internals" by Mark Russinovich
- "Linux Security Cookbook" by Daniel J. Barrett
- "macOS and iOS Internals" by Jonathan Levin
- **Tools**:
- [Microsoft Baseline Security Analyzer](https://learn.microsoft.com/en-us/windows/security/operating-system-security/device-management/windows-security-configuration-framework/mbsa-removal-and-guidance)
- [Lynis](https://cisofy.com/lynis/) - Security auditing tool for Linux
- [OpenSCAP](https://www.open-scap.org/) - Security compliance solution
- [Sysinternals Suite](https://docs.microsoft.com/en-us/sysinternals/)
- **Practical Exercises**:
- Harden a Windows/Linux server
- Implement security baselines
- Perform security audits
- Configure secure authentication mechanisms
- **Endpoint Protection**
- [SANS SEC505: Securing Windows](https://www.cybersecuritycourses.com/course/sec505-securing-windows-and-powershell-automation/)
- [CIS Benchmarks](https://www.cisecurity.org/cis-benchmarks/)
- [Microsoft Defender for Endpoint](https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/)
- [Endpoint Detection and Response (EDR)](https://www.crowdstrike.com/cybersecurity-101/endpoint-security/endpoint-detection-and-response-edr/)
- **Books**:
- "Endpoint Security and Compliance Management" by Daniel Blander
- "Malware Analyst's Cookbook" by Michael Hale Ligh
- **Tools**:
- [Windows Defender](https://www.microsoft.com/en-us/windows/comprehensive-security)
- [ClamAV](https://www.clamav.net/) - Open-source antivirus
- [OSSEC](https://www.ossec.net/) - Host-based intrusion detection
- [Wazuh](https://wazuh.com/) - Security monitoring solution
- **Practical Exercises**:
- Configure endpoint protection solutions
- Implement application whitelisting
- Detect and respond to malware infections
- Create security policies for endpoints
- **Vulnerability Management**
- [Nessus Essentials Tutorial](https://www.tenable.com/products/nessus/nessus-essentials)
- [OpenVAS Tutorial](https://www.openvas.org/)
- [Qualys Vulnerability Management](https://www.qualys.com/apps/vulnerability-management/)
- [NIST Vulnerability Management](https://nvd.nist.gov/vuln/search)
- **Books**:
- "The Vulnerability Management Lifecycle" by Sagar Rahalkar
- "Vulnerability Management" by Park Foreman
- **Tools**:
- [Nessus](https://www.tenable.com/products/nessus) - Vulnerability scanner
- [OpenVAS](https://www.openvas.org/) - Open-source vulnerability scanner
- [Qualys](https://www.qualys.com/) - Cloud-based security and compliance
- [Nexpose](https://www.rapid7.com/products/nexpose/) - Vulnerability management
- **Practical Exercises**:
- Perform vulnerability assessments
- Prioritize vulnerabilities based on risk
- Develop remediation plans
- Implement vulnerability management processes
### 6. Web Application Security
- **OWASP Top 10**
- [OWASP Top Ten](https://owasp.org/www-project-top-ten/)
- [Web Security Academy](https://portswigger.net/web-security)
- [SANS SEC542: Web App Penetration Testing and Ethical Hacking](https://www.sans.org/cyber-security-courses/web-app-penetration-testing-ethical-hacking/)
- [Kontra OWASP Top 10](https://application.security/free/owasp-top-10)
- **Books**:
- "The Web Application Hacker's Handbook" by Dafydd Stuttard and Marcus Pinto
- "Web Security for Developers" by Malcolm McDonald
- "Real-World Bug Hunting" by Peter Yaworski
- **Tools**:
- [OWASP ZAP](https://www.zaproxy.org/) - Web application security scanner
- [Burp Suite](https://portswigger.net/burp) - Web vulnerability scanner
- [Nikto](https://cirt.net/Nikto2) - Web server scanner
- [SQLmap](https://sqlmap.org/) - SQL injection tool
- **Practical Exercises**:
- Set up a vulnerable web application (e.g., [DVWA](https://github.com/digininja/DVWA))
- Identify and exploit common web vulnerabilities
- Implement security controls to prevent attacks
- Perform a web application security assessment
- **Web Application Penetration Testing**
- [Burp Suite Academy](https://portswigger.net/web-security)
- [OWASP Juice Shop](https://owasp.org/www-project-juice-shop/)
- [HackTheBox Web Challenges](https://www.hackthebox.eu/)
- [PentesterLab](https://pentesterlab.com/)
- **Books**:
- "Mastering Modern Web Penetration Testing" by Prakhar Prasad
- "Bug Bounty Hunting Essentials" by Shahmeer Amir
- "Web Hacking 101" by Peter Yaworski
- **Tools**:
- [Burp Suite](https://portswigger.net/burp) - Web vulnerability scanner
- [OWASP ZAP](https://www.zaproxy.org/) - Web application security scanner
- [Dirsearch](https://github.com/maurosoria/dirsearch) - Web path scanner
- [Wfuzz](https://github.com/xmendez/wfuzz) - Web application fuzzer
- **Practical Exercises**:
- Perform a full web application penetration test
- Write a detailed security report
- Exploit and chain multiple vulnerabilities
- Participate in bug bounty programs
- **Secure Coding Practices**
- [Secure Coding in Python](https://github.com/Ericsson/secure_coding_one_stop_shop_for_python)
- [Code Review Lab](https://www.codereviewlab.com/)
- [OWASP Secure Coding Practices](https://owasp.org/www-project-secure-coding-practices-quick-reference-guide/)
- [Secure Coding in Java](https://www.oracle.com/java/technologies/javase/seccodeguide.html)
- [Microsoft Secure Coding Guidelines](https://docs.microsoft.com/en-us/previous-versions/visualstudio/visual-studio-2010/ms182020(v=vs.100))
- **Books**:
- "Secure Coding in C and C++" by Robert C. Seacord
- "Iron-Clad Java: Building Secure Web Applications" by Jim Manico
- "Secure Programming Cookbook for C and C++" by John Viega
- **Tools**:
- [SonarQube](https://www.sonarqube.org/) - Code quality and security
- [OWASP Dependency-Check](https://owasp.org/www-project-dependency-check/) - Software composition analysis
- [Snyk](https://snyk.io/) - Open source security platform
- [Checkmarx](https://www.checkmarx.com/) - Static application security testing
- [Vulert](https://www.vulert.com)- Vulert secures software by detecting vulnerabilities in open-source dependencies—without accessing your code. It supports Js, PHP, Java, Python, and more.
- **Practical Exercises**:
- Review code for security vulnerabilities
- Implement secure authentication and authorization
- Secure data storage and transmission
- Integrate security into the development lifecycle
## Specialization Phase
### 7. Offensive Security
- **Penetration Testing Methodology**
- [TryHackMe: Complete Beginner Path](https://tryhackme.com/path/outline/beginner)
- [HackTheBox Academy](https://academy.hackthebox.com/)
- [SANS Penetration Testing Roadmap](https://www.sans.org/cyber-security-skills-roadmap/)
- [Offensive Security Certified Professional (OSCP)](https://www.offensive-security.com/pwk-oscp/)
- [Penetration Testing Execution Standard (PTES)](http://www.pentest-standard.org/)
- **Books**:
- "The Hacker Playbook 3" by Peter Kim
- "Advanced Penetration Testing" by Wil Allsopp
- "Penetration Testing: A Hands-On Introduction to Hacking" by Georgia Weidman
- **Tools**:
- [Metasploit Framework](https://www.metasploit.com/) - Penetration testing framework
- [Cobalt Strike](https://www.cobaltstrike.com/) - Adversary simulation software
- [Empire](https://github.com/BC-SECURITY/Empire) - Post-exploitation framework
- [Covenant](https://github.com/cobbr/Covenant) - .NET command and control framework
- **Practical Exercises**:
- Complete CTF challenges on platforms like HackTheBox and TryHackMe
- Perform a full penetration test in a lab environment
- Document findings in a professional penetration testing report
- Practice OSCP-like challenges
- **Exploitation Techniques**
- [Metasploit Unleashed](https://www.offensive-security.com/metasploit-unleashed/)
- [OSCP Preparation Guide](https://johnjhacking.com/blog/the-oscp-preperation-guide-2020/)
- [Exploit Development](https://github.com/wtsxDev/Exploit-Development)
- [Buffer Overflow Tutorial](https://www.youtube.com/watch?v=1S0aBV-Waeo)
- **Books**:
- "The Shellcoder's Handbook" by Chris Anley
- "A Guide to Kernel Exploitation" by Enrico Perla
- "Gray Hat Python" by Justin Seitz
- **Tools**:
- [Metasploit Framework](https://www.metasploit.com/) - Penetration testing framework
- [GDB](https://www.gnu.org/software/gdb/) - GNU debugger
- [IDA Pro](https://hex-rays.com/ida-pro/) - Disassembler and debugger
- [Ghidra](https://ghidra-sre.org/) - Software reverse engineering framework
- **Practical Exercises**:
- Develop custom exploits for known vulnerabilities
- Analyze and modify public exploits
- Practice buffer overflow exploitation
- Perform post-exploitation activities
- **Social Engineering**
- [Social Engineering: The Science of Human Hacking](https://www.social-engineer.org/)
- [The Social-Engineer Toolkit (SET)](https://github.com/trustedsec/social-engineer-toolkit)
- [SANS SEC567: Social Engineering for Penetration Testers](https://www.sans.org/cyber-security-courses/social-engineering-security/)
- **Books**:
- "Social Engineering: The Art of Human Hacking" by Christopher Hadnagy
- "Phishing Dark Waters" by Christopher Hadnagy and Michele Fincher
- "The Art of Deception" by Kevin Mitnick
- **Tools**:
- [Social-Engineer Toolkit (SET)](https://github.com/trustedsec/social-engineer-toolkit)
- [Gophish](https://getgophish.com/) - Open-source phishing framework
- [King Phisher](https://github.com/securestate/king-phisher) - Phishing campaign toolkit
- [SpiderFoot](https://www.spiderfoot.net/) - OSINT automation tool
- **Practical Exercises**:
- Create and execute a phishing campaign (in a controlled environment)
- Develop social engineering scenarios
- Practice pretexting and impersonation techniques
- Analyze successful social engineering attacks
### 8. Defensive Security
- **Security Operations Center (SOC)**
- [SOC Analyst Learning Path](https://app.letsdefend.io/path/soc-analyst-learning-path)
- [Blue Team Labs Online](https://blueteamlabs.online/)
- [SANS SEC450: Blue Team Fundamentals](https://www.sans.org/cyber-security-courses/blue-team-fundamentals-security-operations-analysis/)
- [Cybrary SOC Analyst](https://www.cybrary.it/career-path/soc-analyst)
- **Books**:
- "Blue Team Handbook: SOC, SIEM, and Threat Hunting" by Don Murdoch
- "Security Operations Center: Building, Operating, and Maintaining your SOC" by Joseph Muniz
- "The Practice of Network Security Monitoring" by Richard Bejtlich
- **Tools**:
- [Splunk](https://www.splunk.com/) - Security information and event management
- [ELK Stack](https://www.elastic.co/elastic-stack) - Log analysis platform
- [Wazuh](https://wazuh.com/) - Security monitoring solution
- [TheHive](https://thehive-project.org/) - Security incident response platform
- **Practical Exercises**:
- Set up a SIEM solution
- Create detection rules for common attacks
- Perform log analysis and correlation
- Develop incident response playbooks
- **Incident Response**
- [SANS Incident Handler's Handbook](https://www.sans.org/white-papers/33901/)
- [NIST Incident Response Framework](https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf)
- [SANS FOR508: Advanced Digital Forensics, Incident Response, and Threat Hunting](https://www.sans.org/cyber-security-courses/advanced-incident-response-threat-hunting-training/)
- [Incident Response Consortium](https://www.incidentresponse.com/)
- **Books**:
- "Incident Response & Computer Forensics" by Jason T. Luttgens
- "The Art of Memory Forensics" by Michael Hale Ligh
- "Digital Forensics and Incident Response" by Gerard Johansen
- **Tools**:
- [TheHive](https://thehive-project.org/) - Security incident response platform
- [Velociraptor](https://www.velocidex.com/) - Digital forensics and incident response
- [MISP](https://www.misp-project.org/) - Threat intelligence platform
- [GRR Rapid Response](https://github.com/google/grr) - Remote live forensics
- **Practical Exercises**:
- Develop an incident response plan
- Simulate and respond to security incidents
- Perform forensic analysis of compromised systems
- Create incident response reports
- **Digital Forensics**
- [SANS FOR500: Windows Forensic Analysis](https://www.sans.org/cyber-security-courses/windows-forensic-analysis/)
- [Digital Forensics Framework](https://github.com/arxsys/dff)
- [Computer Forensics Tutorial](https://www.udemy.com/course/computer-forensics-and-digital-forensics-for-everyone/?srsltid=AfmBOoq91fIkp7eYQunGBGJV6SW4KWgg8aj-rmXTlcuUVp05GZT3s4aM)
- [NIST Computer Forensics Tools and Techniques Catalog](https://toolcatalog.nist.gov/)
- **Books**:
- "File System Forensic Analysis" by Brian Carrier
- "Digital Forensics with Open Source Tools" by Cory Altheide and Harlan Carvey
- "Windows Forensic Analysis Toolkit" by Harlan Carvey
- **Tools**:
- [Autopsy](https://www.autopsy.com/) - Digital forensics platform
- [FTK Imager](https://www.exterro.com/digital-forensics-software/ftk-imager) - Forensic imaging tool
- [Volatility](https://www.volatilityfoundation.org/) - Memory forensics framework
- [Sleuth Kit](https://www.sleuthkit.org/) - Disk analysis tools
- **Practical Exercises**:
- Perform disk forensics on compromised systems
- Analyze memory dumps for evidence
- Recover deleted files and data
- Create forensic investigation reports
### 9. Cloud Security
- **Cloud Security Fundamentals**
- [AWS Security Fundamentals](https://aws.amazon.com/training/course-descriptions/security-fundamentals/)
- [Azure Security Technologies](https://learn.microsoft.com/en-us/training/courses/az-500t00)
- [Google Cloud Security](https://cloud.google.com/security/)
- [Cloud Security Alliance Courses](https://cloudsecurityalliance.org/education/)
- [IBM Cloud Security](https://www.ibm.com/cloud/learn/cloud-security)
- **Books**:
- "Cloud Security: A Comprehensive Guide" by Chris Dotson
- "Practical Cloud Security" by Chris Dotson
- "AWS Security" by Dylan Shields
- **Tools**:
- [AWS Security Hub](https://aws.amazon.com/security-hub/)
- [Azure Security Center](https://azuremarketplace.microsoft.com/en-us/marketplace/apps/microsoft.azuresecuritycenter?tab=overview)
- [Google Cloud Security Command Center](https://cloud.google.com/security-command-center)
- [CloudSploit](https://github.com/aquasecurity/cloudsploit) - Cloud security scanner
- **Practical Exercises**:
- Set up secure cloud infrastructure
- Implement identity and access management
- Configure cloud security monitoring
- Perform cloud security assessments
- **Cloud Security Architecture**
- [Cloud Security Alliance Guidance](https://cloudsecurityalliance.org/research/guidance/)
- [Well-Architected Framework (AWS)](https://aws.amazon.com/architecture/well-architected/)
- [Azure Well-Architected Framework](https://docs.microsoft.com/en-us/azure/architecture/framework/)
- [Google Cloud Architecture Framework](https://cloud.google.com/architecture/framework)
- **Books**:
- "Cloud Security Architecture" by Lee Newcombe
- "Architecting for Security in the Cloud" by David Linthicum
- **Tools**:
- [Terraform](https://www.terraform.io/) - Infrastructure as code
- [CloudFormation](https://aws.amazon.com/cloudformation/) - AWS infrastructure as code
- [Azure Resource Manager](https://azure.microsoft.com/en-us/features/resource-manager/) - Azure infrastructure as code
- **Practical Exercises**:
- Design a secure cloud architecture
- Implement defense in depth in cloud environments
- Create infrastructure as code templates with security controls
- Perform threat modeling for cloud architectures
- **Container Security**
- [Docker Security](https://docs.docker.com/engine/security/)
- [Kubernetes Security](https://kubernetes.io/docs/concepts/security/)
- [OWASP Docker Security](https://cheatsheetseries.owasp.org/cheatsheets/Docker_Security_Cheat_Sheet.html)
- [Kubernetes Security Best Practices](https://kubernetes.io/blog/2016/08/security-best-practices-kubernetes-deployment/)
- **Books**:
- "Container Security" by Liz Rice
---
[Read more](https://github.com/hamed233/cybersecurity-mastery-roadmap)